Warning: Permanently added '[localhost]:57449' (ECDSA) to the list of known hosts. 2024/12/20 18:04:07 fuzzer started 2024/12/20 18:04:08 dialing manager at localhost:34561 syzkaller login: [ 61.530730] cgroup: Unknown subsys name 'net' [ 61.632553] cgroup: Unknown subsys name 'cpuset' [ 61.662385] cgroup: Unknown subsys name 'rlimit' 2024/12/20 18:04:25 syscalls: 2217 2024/12/20 18:04:25 code coverage: enabled 2024/12/20 18:04:25 comparison tracing: enabled 2024/12/20 18:04:25 extra coverage: enabled 2024/12/20 18:04:25 setuid sandbox: enabled 2024/12/20 18:04:25 namespace sandbox: enabled 2024/12/20 18:04:25 Android sandbox: enabled 2024/12/20 18:04:25 fault injection: enabled 2024/12/20 18:04:25 leak checking: enabled 2024/12/20 18:04:25 net packet injection: enabled 2024/12/20 18:04:25 net device setup: enabled 2024/12/20 18:04:25 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2024/12/20 18:04:25 devlink PCI setup: PCI device 0000:00:10.0 is not available 2024/12/20 18:04:25 USB emulation: enabled 2024/12/20 18:04:25 hci packet injection: enabled 2024/12/20 18:04:25 wifi device emulation: enabled 2024/12/20 18:04:25 802.15.4 emulation: enabled 2024/12/20 18:04:25 fetching corpus: 50, signal 11744/13614 (executing program) 2024/12/20 18:04:25 fetching corpus: 100, signal 24245/27735 (executing program) 2024/12/20 18:04:26 fetching corpus: 150, signal 36796/41654 (executing program) 2024/12/20 18:04:26 fetching corpus: 200, signal 41831/48132 (executing program) 2024/12/20 18:04:26 fetching corpus: 250, signal 46197/53848 (executing program) 2024/12/20 18:04:26 fetching corpus: 300, signal 50545/59476 (executing program) 2024/12/20 18:04:26 fetching corpus: 350, signal 54216/64377 (executing program) 2024/12/20 18:04:26 fetching corpus: 400, signal 57983/69271 (executing program) 2024/12/20 18:04:26 fetching corpus: 450, signal 61816/74212 (executing program) 2024/12/20 18:04:26 fetching corpus: 500, signal 64875/78365 (executing program) 2024/12/20 18:04:26 fetching corpus: 550, signal 66940/81554 (executing program) 2024/12/20 18:04:26 fetching corpus: 600, signal 69750/85333 (executing program) 2024/12/20 18:04:26 fetching corpus: 650, signal 72359/88888 (executing program) 2024/12/20 18:04:27 fetching corpus: 700, signal 74165/91727 (executing program) 2024/12/20 18:04:27 fetching corpus: 750, signal 75649/94257 (executing program) 2024/12/20 18:04:27 fetching corpus: 800, signal 78316/97760 (executing program) 2024/12/20 18:04:27 fetching corpus: 850, signal 81060/101297 (executing program) 2024/12/20 18:04:27 fetching corpus: 900, signal 83734/104718 (executing program) 2024/12/20 18:04:27 fetching corpus: 950, signal 86432/108057 (executing program) 2024/12/20 18:04:27 fetching corpus: 1000, signal 89014/111218 (executing program) 2024/12/20 18:04:27 fetching corpus: 1050, signal 90499/113548 (executing program) 2024/12/20 18:04:27 fetching corpus: 1100, signal 92104/115906 (executing program) 2024/12/20 18:04:28 fetching corpus: 1150, signal 93718/118194 (executing program) 2024/12/20 18:04:28 fetching corpus: 1200, signal 95406/120558 (executing program) 2024/12/20 18:04:28 fetching corpus: 1250, signal 97463/123159 (executing program) 2024/12/20 18:04:28 fetching corpus: 1300, signal 99303/125557 (executing program) 2024/12/20 18:04:28 fetching corpus: 1350, signal 100644/127530 (executing program) 2024/12/20 18:04:28 fetching corpus: 1400, signal 103867/130826 (executing program) 2024/12/20 18:04:28 fetching corpus: 1450, signal 105862/133213 (executing program) 2024/12/20 18:04:28 fetching corpus: 1500, signal 107013/135023 (executing program) 2024/12/20 18:04:28 fetching corpus: 1550, signal 108144/136727 (executing program) 2024/12/20 18:04:29 fetching corpus: 1600, signal 109566/138594 (executing program) 2024/12/20 18:04:29 fetching corpus: 1650, signal 110470/140101 (executing program) 2024/12/20 18:04:29 fetching corpus: 1700, signal 111196/141460 (executing program) 2024/12/20 18:04:29 fetching corpus: 1750, signal 112392/143151 (executing program) 2024/12/20 18:04:29 fetching corpus: 1800, signal 113922/145054 (executing program) 2024/12/20 18:04:29 fetching corpus: 1850, signal 114672/146385 (executing program) 2024/12/20 18:04:29 fetching corpus: 1900, signal 115652/147878 (executing program) 2024/12/20 18:04:29 fetching corpus: 1950, signal 116476/149217 (executing program) 2024/12/20 18:04:29 fetching corpus: 2000, signal 117196/150469 (executing program) 2024/12/20 18:04:29 fetching corpus: 2050, signal 118726/152221 (executing program) 2024/12/20 18:04:30 fetching corpus: 2100, signal 119735/153607 (executing program) 2024/12/20 18:04:30 fetching corpus: 2150, signal 120537/154889 (executing program) 2024/12/20 18:04:30 fetching corpus: 2200, signal 121342/156139 (executing program) 2024/12/20 18:04:30 fetching corpus: 2250, signal 122149/157387 (executing program) 2024/12/20 18:04:30 fetching corpus: 2300, signal 122956/158626 (executing program) 2024/12/20 18:04:30 fetching corpus: 2350, signal 123927/159922 (executing program) 2024/12/20 18:04:30 fetching corpus: 2400, signal 124482/160969 (executing program) 2024/12/20 18:04:30 fetching corpus: 2450, signal 125525/162252 (executing program) 2024/12/20 18:04:30 fetching corpus: 2500, signal 126055/163264 (executing program) 2024/12/20 18:04:30 fetching corpus: 2550, signal 126789/164392 (executing program) 2024/12/20 18:04:30 fetching corpus: 2600, signal 127796/165596 (executing program) 2024/12/20 18:04:31 fetching corpus: 2650, signal 128361/166558 (executing program) 2024/12/20 18:04:31 fetching corpus: 2700, signal 128922/167500 (executing program) 2024/12/20 18:04:31 fetching corpus: 2750, signal 130086/168747 (executing program) 2024/12/20 18:04:31 fetching corpus: 2800, signal 130661/169669 (executing program) 2024/12/20 18:04:31 fetching corpus: 2850, signal 131151/170579 (executing program) 2024/12/20 18:04:31 fetching corpus: 2900, signal 131723/171518 (executing program) 2024/12/20 18:04:31 fetching corpus: 2950, signal 132226/172436 (executing program) 2024/12/20 18:04:31 fetching corpus: 3000, signal 132753/173306 (executing program) 2024/12/20 18:04:31 fetching corpus: 3050, signal 133837/174411 (executing program) 2024/12/20 18:04:31 fetching corpus: 3100, signal 134679/175417 (executing program) 2024/12/20 18:04:32 fetching corpus: 3150, signal 135420/176315 (executing program) 2024/12/20 18:04:32 fetching corpus: 3200, signal 136190/177280 (executing program) 2024/12/20 18:04:32 fetching corpus: 3250, signal 137046/178218 (executing program) 2024/12/20 18:04:32 fetching corpus: 3300, signal 137864/179131 (executing program) 2024/12/20 18:04:32 fetching corpus: 3350, signal 138640/180032 (executing program) 2024/12/20 18:04:32 fetching corpus: 3400, signal 139707/181004 (executing program) 2024/12/20 18:04:32 fetching corpus: 3450, signal 141155/182040 (executing program) 2024/12/20 18:04:32 fetching corpus: 3500, signal 141655/182798 (executing program) 2024/12/20 18:04:32 fetching corpus: 3550, signal 142230/183548 (executing program) 2024/12/20 18:04:32 fetching corpus: 3600, signal 142841/184262 (executing program) 2024/12/20 18:04:33 fetching corpus: 3650, signal 143808/185097 (executing program) 2024/12/20 18:04:33 fetching corpus: 3700, signal 144494/185853 (executing program) 2024/12/20 18:04:33 fetching corpus: 3750, signal 145092/186510 (executing program) 2024/12/20 18:04:33 fetching corpus: 3800, signal 145427/187153 (executing program) 2024/12/20 18:04:33 fetching corpus: 3850, signal 146151/187846 (executing program) 2024/12/20 18:04:33 fetching corpus: 3900, signal 146470/188446 (executing program) 2024/12/20 18:04:33 fetching corpus: 3950, signal 147152/189103 (executing program) 2024/12/20 18:04:33 fetching corpus: 4000, signal 147804/189720 (executing program) 2024/12/20 18:04:33 fetching corpus: 4050, signal 148240/190323 (executing program) 2024/12/20 18:04:33 fetching corpus: 4100, signal 148907/190973 (executing program) 2024/12/20 18:04:34 fetching corpus: 4150, signal 149204/191544 (executing program) 2024/12/20 18:04:34 fetching corpus: 4200, signal 149912/192169 (executing program) 2024/12/20 18:04:34 fetching corpus: 4250, signal 150910/192786 (executing program) 2024/12/20 18:04:34 fetching corpus: 4300, signal 151190/193337 (executing program) 2024/12/20 18:04:34 fetching corpus: 4350, signal 151596/193895 (executing program) 2024/12/20 18:04:34 fetching corpus: 4400, signal 151975/194423 (executing program) 2024/12/20 18:04:34 fetching corpus: 4450, signal 152482/194972 (executing program) 2024/12/20 18:04:34 fetching corpus: 4500, signal 153281/195548 (executing program) 2024/12/20 18:04:34 fetching corpus: 4550, signal 153755/196047 (executing program) 2024/12/20 18:04:34 fetching corpus: 4600, signal 154407/196572 (executing program) 2024/12/20 18:04:35 fetching corpus: 4650, signal 154760/197058 (executing program) 2024/12/20 18:04:35 fetching corpus: 4700, signal 155112/197531 (executing program) 2024/12/20 18:04:35 fetching corpus: 4750, signal 155703/197993 (executing program) 2024/12/20 18:04:35 fetching corpus: 4800, signal 156164/198454 (executing program) 2024/12/20 18:04:35 fetching corpus: 4850, signal 156891/198919 (executing program) 2024/12/20 18:04:35 fetching corpus: 4900, signal 157287/199337 (executing program) 2024/12/20 18:04:35 fetching corpus: 4950, signal 157760/199714 (executing program) 2024/12/20 18:04:35 fetching corpus: 5000, signal 158044/200138 (executing program) 2024/12/20 18:04:35 fetching corpus: 5050, signal 158523/200182 (executing program) 2024/12/20 18:04:35 fetching corpus: 5100, signal 159029/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5150, signal 159400/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5200, signal 159794/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5250, signal 160372/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5300, signal 161078/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5350, signal 161377/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5400, signal 161882/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5450, signal 162361/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5500, signal 162597/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5550, signal 163018/200182 (executing program) 2024/12/20 18:04:36 fetching corpus: 5600, signal 163390/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 5650, signal 163734/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 5700, signal 164165/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 5750, signal 164473/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 5800, signal 164924/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 5850, signal 165280/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 5900, signal 165587/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 5950, signal 165953/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 6000, signal 166447/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 6050, signal 166806/200182 (executing program) 2024/12/20 18:04:37 fetching corpus: 6100, signal 167197/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6150, signal 167486/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6200, signal 167916/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6250, signal 168146/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6300, signal 168404/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6350, signal 168588/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6400, signal 168975/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6450, signal 169413/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6500, signal 169689/200182 (executing program) 2024/12/20 18:04:38 fetching corpus: 6550, signal 169960/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6600, signal 170264/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6650, signal 170656/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6700, signal 171021/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6750, signal 171304/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6800, signal 171670/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6850, signal 171943/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6900, signal 172313/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 6950, signal 172603/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 7000, signal 172897/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 7050, signal 173142/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 7100, signal 174291/200182 (executing program) 2024/12/20 18:04:39 fetching corpus: 7150, signal 174543/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7200, signal 174821/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7250, signal 175357/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7300, signal 175859/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7350, signal 176053/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7400, signal 176262/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7450, signal 176477/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7500, signal 176724/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7550, signal 176987/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7600, signal 177221/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7650, signal 177747/200182 (executing program) 2024/12/20 18:04:40 fetching corpus: 7700, signal 177993/200182 (executing program) 2024/12/20 18:04:41 fetching corpus: 7750, signal 178310/200182 (executing program) 2024/12/20 18:04:41 fetching corpus: 7800, signal 178586/200182 (executing program) 2024/12/20 18:04:41 fetching corpus: 7850, signal 178914/200182 (executing program) 2024/12/20 18:04:41 fetching corpus: 7900, signal 179167/200182 (executing program) 2024/12/20 18:04:41 fetching corpus: 7950, signal 179542/200182 (executing program) 2024/12/20 18:04:41 fetching corpus: 8000, signal 179818/200182 (executing program) 2024/12/20 18:04:41 fetching corpus: 8050, signal 180096/200192 (executing program) 2024/12/20 18:04:41 fetching corpus: 8100, signal 180315/200192 (executing program) 2024/12/20 18:04:42 fetching corpus: 8150, signal 180505/200192 (executing program) 2024/12/20 18:04:42 fetching corpus: 8200, signal 180953/200192 (executing program) 2024/12/20 18:04:42 fetching corpus: 8250, signal 181433/200192 (executing program) 2024/12/20 18:04:42 fetching corpus: 8300, signal 181718/200192 (executing program) 2024/12/20 18:04:42 fetching corpus: 8350, signal 181968/200192 (executing program) 2024/12/20 18:04:42 fetching corpus: 8400, signal 182146/200192 (executing program) 2024/12/20 18:04:42 fetching corpus: 8450, signal 182318/200192 (executing program) 2024/12/20 18:04:43 fetching corpus: 8500, signal 182626/200192 (executing program) 2024/12/20 18:04:43 fetching corpus: 8550, signal 182995/200192 (executing program) 2024/12/20 18:04:43 fetching corpus: 8600, signal 183313/200192 (executing program) 2024/12/20 18:04:43 fetching corpus: 8650, signal 183510/200192 (executing program) 2024/12/20 18:04:43 fetching corpus: 8700, signal 183733/200192 (executing program) 2024/12/20 18:04:44 fetching corpus: 8750, signal 184129/200192 (executing program) 2024/12/20 18:04:44 fetching corpus: 8800, signal 184870/200192 (executing program) 2024/12/20 18:04:44 fetching corpus: 8850, signal 185091/200192 (executing program) 2024/12/20 18:04:44 fetching corpus: 8900, signal 185416/200192 (executing program) 2024/12/20 18:04:44 fetching corpus: 8950, signal 185807/200192 (executing program) 2024/12/20 18:04:44 fetching corpus: 9000, signal 186081/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9050, signal 186405/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9100, signal 187586/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9150, signal 187838/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9200, signal 188056/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9250, signal 188267/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9300, signal 188473/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9350, signal 188674/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9400, signal 188807/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9450, signal 189096/200192 (executing program) 2024/12/20 18:04:45 fetching corpus: 9500, signal 189602/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9550, signal 189790/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9600, signal 190082/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9650, signal 190300/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9700, signal 190446/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9750, signal 190699/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9800, signal 191058/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9850, signal 191250/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9900, signal 191486/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 9950, signal 191714/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 10000, signal 191940/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 10050, signal 192172/200192 (executing program) 2024/12/20 18:04:46 fetching corpus: 10100, signal 192377/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10150, signal 192537/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10200, signal 192724/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10250, signal 193005/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10300, signal 193165/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10350, signal 193361/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10400, signal 193643/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10450, signal 193838/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10500, signal 194130/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10550, signal 194347/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10600, signal 194600/200192 (executing program) 2024/12/20 18:04:47 fetching corpus: 10650, signal 194807/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 10700, signal 195001/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 10750, signal 195170/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 10800, signal 195332/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 10850, signal 195508/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 10900, signal 195768/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 10950, signal 195963/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 11000, signal 196126/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 11050, signal 196300/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 11100, signal 196995/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 11150, signal 197233/200192 (executing program) 2024/12/20 18:04:48 fetching corpus: 11200, signal 197486/200192 (executing program) 2024/12/20 18:04:49 fetching corpus: 11250, signal 197728/200192 (executing program) 2024/12/20 18:04:49 fetching corpus: 11297, signal 197857/200192 (executing program) 2024/12/20 18:04:49 fetching corpus: 11297, signal 197857/200192 (executing program) 2024/12/20 18:04:53 starting 8 fuzzer processes 18:04:53 executing program 0: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x401, 0x1c, 0xc6}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000440)=0x101) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000480)={0x81, 0x3f, 0x80000001, 0x6f, 0xc9, "e7c6502af92158ffddb907be0b73be7ec35892", 0x3, 0x6}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0xfffffbff, 0x1, "d4a1b29de0af95e3520f8fc839a4266e7865cf", 0xff, 0x5}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000500)={0xff, 0xd5f5, 0x20, 0x1e, 0x1, "8cd09bcb5ee205356ffbc44a7a202e8d29bd4d", 0x0, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x14f800, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x80) write(r0, &(0x7f0000000580)="9b219f8a4b81ea67f4126f4c78e81a8ce85c410476e0cf928e724f7f5d18d85b099f482d28253562a688315e03e1211baa10839a91c1f4677edea4f0fd78b2db973bfed59da13e9bc6d9eb8bf1dfc9b5498b94", 0x53) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000600)={0x101, 0x8001, 0x7}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x100) socketpair(0x1e, 0x6, 0x2, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x2000000) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000006c0)={0xffffffe1, 0x3f, 0x6, 0x0, 0x3, "2f5518c3fc24797b4b36c891bd5d22bdcf4a13"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000700)=0x8) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000740)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000780)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:04:53 executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_MESH(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r0, 0x300, 0x70bd2b, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3c, 0xd}}}}, ["", "", ""]}, 0x20}, 0x1, 0x0, 0x0, 0x6008810}, 0x5) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000401}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x74, r0, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0xffff, 0x4e}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CENTER_FREQ1={0x8}], @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x200}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000011}, 0x20000000) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0x2, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4814}, 0x24000809) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r0, 0x300, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x8000}, 0x4000020) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x3c, 0x0, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xdc}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x3f}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x90}, 0x48040) sendmsg$NL80211_CMD_SET_MAC_ACL(r2, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000700)={&(0x7f0000000640)={0xa0, r1, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x6a}}}}, [@NL80211_ATTR_MAC_ADDRS={0x70, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa, 0x6, @device_b}, {0xa}, {0xa}]}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0xa0}, 0x1, 0x0, 0x0, 0x20000005}, 0x40) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x4c, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40080c0}, 0x90) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(r2, 0xc0189373, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r2, {0x6}}, './file0\x00'}) sendmsg$IPSET_CMD_FLUSH(r3, &(0x7f0000000a00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0xc0400108}, 0xc, &(0x7f00000009c0)={&(0x7f0000000940)={0x68, 0x4, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008000}, 0x200080c0) ioctl$FS_IOC_FIEMAP(r2, 0xc020660b, &(0x7f0000000a40)={0x1942, 0x9, 0x1, 0xfffffff7, 0x4, [{0x0, 0x0, 0xa}, {0x1000, 0x0, 0x1, '\x00', 0x100}, {0x9, 0xd1c, 0xcb53, '\x00', 0x2002}, {0x7, 0x4, 0x4}]}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000b40)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, 0x0, 0x800, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @rand_addr=' \x01\x00'}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @empty}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x4071) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000d00), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x1c, r4, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4) r5 = creat(&(0x7f0000000e00)='./file0\x00', 0x100) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r5, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xd0, 0x0, 0x20, 0x70bd2d, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1f}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x59ec336e}}, {@pci={{0x8}, {0x11}}, {0x8}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x48000}, 0xc000) 18:04:53 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='limits\x00') ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) flock(r0, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x190, 0x0, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8}]}, @TIPC_NLA_NODE={0x78, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x72, 0x3, "3a1a9161f06b5ce2a90e364f8487c60e0f0d741a9345b8591a7cf53008129a0e1d9e4f08f30169a7bf860add71d4c94d1e9873c9472f55235d264a4703ab980a273efda7e822540542c287e1dff6db80b451dadd4ad05e693b5fbdc1d6ecdf96351e96e192223db234368afbc9bd"}]}, @TIPC_NLA_MEDIA={0x4c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_CON={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x499}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x2}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x70, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x101}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x80000001}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8}]}, @TIPC_NLA_SOCK_CON={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x20}]}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x101}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8c17}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x2}]}]}, 0x190}, 0x1, 0x0, 0x0, 0x4004080}, 0x8000) sendmsg$IEEE802154_SCAN_REQ(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0xa00, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5, 0x13, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4050}, 0x20008005) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x38, 0x0, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x80) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'wpan4\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'wpan3\x00', 0x0}) sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x30, r1, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x30}}, 0x4000011) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000700), r0) getsockopt$inet6_mreq(r0, 0x29, 0x1c, &(0x7f0000000740)={@rand_addr, 0x0}, &(0x7f0000000780)=0x14) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x6c, r4, 0xc16eae691079e235, 0x70bd2d, 0x25dfdbfe, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r5}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x7137}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4040000}, 0x15) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r0, 0xc018937e, &(0x7f00000008c0)={{0x1, 0x1, 0x18, r0, @out_args}, './file0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r6, 0x402c5342, &(0x7f0000000900)={0x2, 0x6, 0x7, {0xa67, 0x241}, 0xcb4e, 0x5}) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000b40)={&(0x7f0000000980)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000b00)={&(0x7f00000009c0)={0x124, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xcc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x5, @loopback, 0x76ded081}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x7fffffff, @mcast1, 0x9}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9f56}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x8, @remote, 0x8000}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x400, @empty, 0x4}}}}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1f}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xb17}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x4008000}, 0x40) sendmsg$ETHTOOL_MSG_RINGS_GET(r6, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x50, 0x0, 0x8, 0x70bd2d, 0x25dfdbfe, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20004840}, 0x20000800) ftruncate(r0, 0x4) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0xc0189377, &(0x7f0000000cc0)={{0x1, 0x1, 0x18, r0, {0x800, 0x401}}, './file1\x00'}) sendmsg$SEG6_CMD_SETHMAC(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)={0x64, 0x0, 0xcccb6241916fb394, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x4]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7f}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0xc081}, 0x20004000) 18:04:53 executing program 3: ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000000)={0x0, 0x1, 0x3, 0x4}) r0 = syz_open_dev$vcsu(&(0x7f0000000040), 0x100000000, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000080)={0x2003}) readv(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/108, 0x6c}, {&(0x7f0000000140)=""/183, 0xb7}], 0x2) r1 = syz_io_uring_complete(0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000240)={0x0, 0x1, [0xfffffffffffffff9, 0x3f, 0x1, 0x9, 0x9, 0x5]}) preadv(r1, &(0x7f0000002440)=[{&(0x7f0000000280)=""/57, 0x39}, {&(0x7f00000002c0)=""/7, 0x7}, {&(0x7f0000000300)=""/246, 0xf6}, {&(0x7f0000000400)=""/29, 0x1d}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/4096, 0x1000}], 0x6, 0xffffff81, 0xffff) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f00000024c0)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0}) r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000026c0), 0x2000, 0x0) ioctl$BTRFS_IOC_START_SYNC(r0, 0x80089418, &(0x7f0000002700)=0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r3, 0xc0c89425, &(0x7f0000002740)={"465ee6748f05ad314b593c9b06ebdbe9", r2, r4, {0x6ca561c5, 0xfffffffc}, {0xffffffffffff0001, 0x2}, 0x5, [0x48f25933, 0xc6, 0xbd7, 0x40f, 0x0, 0x1, 0x8000, 0x100000001, 0x31, 0x8001, 0x9, 0x0, 0x7, 0x2, 0x1000, 0x7]}) preadv(r0, &(0x7f0000002980)=[{&(0x7f0000002840)=""/67, 0x43}, {&(0x7f00000028c0)=""/5, 0x5}, {&(0x7f0000002900)=""/115, 0x73}], 0x3, 0x99d, 0x5) r5 = openat(r1, &(0x7f00000029c0)='./file0\x00', 0x0, 0x80) r6 = open(&(0x7f0000002a00)='./file0\x00', 0x488480, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r6, 0x0, 0x41, &(0x7f0000002a40)={'raw\x00', 0x52, "41a97c9019936e12eaf1db3ee4dbbff0801781df126ca8c826041f77711db28b73725889c9d73cfc8ab92bf0b92fca493856df7f95e1e9c02e577ab0d1b469157b02db4cfe803be304f220562185658e2d38"}, &(0x7f0000002ac0)=0x76) ioctl$sock_SIOCADDDLCI(r1, 0x8980, &(0x7f0000002b00)={'hsr0\x00', 0x3f}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000002b80)={0x3, &(0x7f0000002b40)=[{0x9, 0x0, 0x69, 0x10000}, {0xfff7, 0x60, 0x7f, 0x400}, {0x0, 0x2, 0x4, 0x16}]}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000002bc0)={r1, 0x7, 0xa1f, 0x438e}) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000002d40)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000002d00)={&(0x7f0000002c40)={0xa0, 0x0, 0x813, 0x70bd25, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}]}, 0xa0}}, 0x44010) fchown(r0, 0x0, 0xffffffffffffffff) [ 106.714643] audit: type=1400 audit(1734717893.487:7): avc: denied { execmem } for pid=280 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 18:04:53 executing program 5: prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000000)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000040)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000000c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000100)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000140)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000180)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000001c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000240)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000280)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000002c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000300)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000340)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000380)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000003c0)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000400)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000440)) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000480)) prctl$PR_GET_ENDIAN(0x13, &(0x7f00000004c0)) 18:04:53 executing program 6: sendmsg$IEEE802154_LIST_IFACE(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000440}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0xa0f, 0x70bd2c, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x48000}, 0x4000800) r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_DEL_DEV(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r0, 0x2, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0xc, 0x14, 'syz0\x00'}}, ["", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x40810) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000003c0), r1) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x70, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy2\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000500), r1) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000580), r1) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r1, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x40, r3, 0x200, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_LLSEC_KEY_MODE={0x5, 0x2b, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x4000000) syz_genetlink_get_family_id$fou(&(0x7f0000000680), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000800)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000740)={0x50, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_TX_POWER={0x8, 0xb, 0x8c5d}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xe461}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0xfff}]}, 0x50}, 0x1, 0x0, 0x0, 0x40080}, 0x4801) r6 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GET(r6, &(0x7f00000009c0)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000980)={&(0x7f00000008c0)={0xc0, r7, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x1c}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}}, {@pci={{0x8}, {0x11}}, {0x1c}}]}, 0xc0}, 0x1, 0x0, 0x0, 0x4000001}, 0x80) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2478b227bf372be9}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x34, r0, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x34}, 0x1, 0x0, 0x0, 0x20040004}, 0x810) r8 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_PROTOCOLS(r1, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)={0x54, r8, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private2={0xfc, 0x2, '\x00', 0x1}}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x28}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x1a}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4) 18:04:53 executing program 7: ioctl$PERF_EVENT_IOC_PERIOD(0xffffffffffffffff, 0x40082404, &(0x7f0000000000)=0x7) r0 = socket(0x22, 0x80000, 0x8001) ioctl$EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, &(0x7f0000000040)={{0x1, 0x1, 0x18, r0, {0x9, 0x1ff}}, './file0\x00'}) getsockopt$IP_VS_SO_GET_DAEMON(r1, 0x0, 0x487, &(0x7f0000000080), &(0x7f00000000c0)=0x30) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x448400, 0x0) r3 = inotify_init1(0x80800) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000140)={0x2000}) r4 = fsmount(r1, 0x20f30c6e542323e7, 0xa) epoll_pwait(r4, &(0x7f0000000180)=[{}, {}, {}, {}], 0x4, 0x0, &(0x7f00000001c0)={[0x7]}, 0x8) r5 = openat$null(0xffffffffffffff9c, &(0x7f0000000200), 0xe6000, 0x0) ioctl$NS_GET_NSTYPE(r5, 0xb703, 0x0) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r2) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r6, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x81}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x10044048) sendfile(0xffffffffffffffff, r1, &(0x7f00000003c0)=0x6, 0x4) r7 = getegid() lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) newfstatat(0xffffffffffffff9c, &(0x7f0000000640)='./file1\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) fsetxattr$system_posix_acl(r1, &(0x7f0000000400)='system.posix_acl_default\x00', &(0x7f0000000700)={{}, {0x1, 0x2}, [{0x2, 0x6, 0xffffffffffffffff}], {0x4, 0x6}, [{0x8, 0x1, r7}, {0x8, 0x4, 0xee00}, {0x8, 0x1, r8}, {0x8, 0x1, r9}], {0x10, 0x2}, {0x20, 0x2}}, 0x4c, 0x3) inotify_add_watch(r3, &(0x7f0000000780)='./file1\x00', 0x1000000) 18:04:54 executing program 4: sendmsg$SOCK_DESTROY(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x128, 0x15, 0x400, 0x70bd25, 0x25dfdbfd, {0x1f}, [@INET_DIAG_REQ_BYTECODE={0x4}, @INET_DIAG_REQ_BYTECODE={0xa5, 0x1, "b183363890cbb216b99c0ce167d5c296194c8cb5fcd33b5844868af9d6e9167de1de55f37bfbb088af7752c12c42c4bc2b62b4e3ab65411349f2bf5ed193d220c0e4f9914a40ed1a862f102171f62115a1aef721fdbd9d371e8abc1900a02fe71297a2649f5e6f19c5707a3364728e94a8ce97ac313a6f0fc79b98c820dd5733a5b0132bc4ed4dc87e26d07bac674d4a7025c41761fe545d82393fc8aca14300cb"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "859e7b8d95dd9ec53231b4e1e84eaea9591a6bb21e5531b0298fc2ce720549e8549e7cc82466"}, @INET_DIAG_REQ_BYTECODE={0x39, 0x1, "3417fcce08e366e2e4e4e6e37261574f6bc152e9bd2f7c453ef7b81dd28836db14ba346a6ca56800b2243b79a6af12ad9a22633bb5"}]}, 0x128}, 0x1, 0x0, 0x0, 0x881}, 0x814) r0 = pidfd_open(0x0, 0x0) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x8) process_madvise(r0, &(0x7f0000000400)=[{&(0x7f0000000200)="501309ed1bb66837022b3f77fbbaee569faa374fd0e2a805adad4ae866c8ad75c3d3eba2ea55ce6aba3b5902ae6da0954c39cb6e2e9fe98f73d181b0c4b50f6d0a38b5c5574cba143b597d1d873b", 0x4e}, {&(0x7f0000000280)="647c5bbde330b6279cf3c4fe594380cbb197a7a8613e94e4d94f5413116cc78513f58910e5b6ab26ce80af33ed49e2485c08ab526d70d31c4617d722a541c18ed552fff2e8f0b982e9c27331e05e693324f19c247b3cb2e9a8f356ad0bb1d14d417e0ab3b9c4100befbcaa355752b7573d177c2cc9eec4ecdbea9c6676aa03be87", 0x81}, {&(0x7f0000000340)="792620832a5d9f809d1702dca3a7e9084d7d6d7887f9a75d50cc5219f7dbe9839a17ffef3e130483ead92468e787ba31c62f1fcdcf9f7d657de2afdab865308ecd3a9e6f92f7f18db456fa37077ff9e6e92f34bba9808640ab4e386e99bd0220cb33235e3537098a5de5f256797c902a5a029e731f37c2c30ea7ceccdccc87e61731b3a5869a6a370e6a2929f35a9e715e91", 0x92}], 0x3, 0x64, 0x0) r1 = pidfd_open(0xffffffffffffffff, 0x0) r2 = syz_open_procfs$userns(0x0, &(0x7f0000000500)) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000540)={0x0, ""/256, 0x0, 0x0}) process_madvise(r0, &(0x7f00000017c0)=[{&(0x7f0000000740)="a049630db5d1e4e817d1b31a9d32dfc6349df0b68c4e8dea1adb4b873f662bdf443de46ea6f95a9e660450c204d5ac6ec7a6bb8cbd37f224d2f105f3", 0x3c}, {&(0x7f0000000780)="41e6e1620e5c549a262ba86303f9e7c18a8b5b69a4ccd83adae3648dcc119011aff8bc0b", 0x24}, {&(0x7f00000007c0)="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", 0x1000}], 0x3, 0xa, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000001800)={{0x1, 0x1, 0x18, r1, {0x500000}}, './file0\x00'}) r7 = socket(0x2b, 0x5, 0x7f) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001880), 0xffffffffffffffff) sendmsg$NL80211_CMD_STOP_P2P_DEVICE(r7, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x14, r8, 0x8, 0x70bd27, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8002}, 0x48001) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000001980)={'wlan1\x00'}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r6, 0xd000943e, &(0x7f00000019c0)={r5, r3, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r7, 0x81f8943c, &(0x7f00000029c0)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r9, 0x81f8943c, &(0x7f0000002bc0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000002dc0)={0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002fc0)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r6, 0xd000943d, &(0x7f0000070d00)={0x100000001, [{0x0, r5}, {r10, r5}, {r11, r5}, {r3, r5}, {r12, r5}, {r3}, {r13, r5}, {0x0, r14}, {0x0, r5}, {r4, r5}, {r3}, {}, {r4}, {0x0, r5}, {r3, r5}, {0x0, r5}, {}, {r3}, {0x0, r5}, {r4, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {r3}, {0x0, r5}, {r3}, {r4, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {}, {}, {r4}, {0x0, r5}, {r4}, {0x0, r5}, {0x0, r5}, {}, {}, {r3}, {r4}, {0x0, r5}, {}, {r3, r5}, {r3, r5}, {r4, r5}, {}, {r3, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3}, {r4, r5}, {}, {0x0, r5}, {r4, r5}, {r4, r5}, {r4}, {}, {r4, r5}, {r4, r5}, {}, {r3}, {r3}, {r4, r5}, {r3}, {r3}, {0x0, r5}, {}, {r3, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {}, {r4}, {}, {r3, r5}, {r4, r5}, {r3}, {r3, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {0x0, r5}, {r4}, {r4, r5}, {}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3, r5}, {r4, r5}, {r3}, {}, {r4, r5}, {r4}, {r3}, {r4, r5}, {r3, r5}, {r4, r5}, {}, {r3}, {r3}, {0x0, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r3}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r3, r5}, {r3, r5}, {r3}, {r4, r5}, {r4}, {r3, r5}, {r4, r5}, {r4, r5}, {r4}, {r4, r5}, {r3}, {}, {}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4, r5}, {r3}, {r4}, {0x0, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {}, {}, {r3}, {}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {0x0, r5}, {r4, r5}, {}, {r4, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {0x0, r5}, {r3, r5}, {0x0, r5}, {r3}, {r4}, {0x0, r5}, {r3}, {}, {r4, r5}, {r3, r5}, {r4}, {r3, r5}, {0x0, r5}, {r4}, {r3, r5}, {0x0, r5}, {r3}, {r4, r5}, {r4, r5}, {0x0, r5}, {0x0, r5}, {}, {}, {r3, r5}, {r3, r5}, {r3, r5}, {r3, r5}, {r3}, {0x0, r5}, {r3, r5}, {r4}, {r4}, {r3, r5}, {r4}, {r4, r5}, {r4, r5}, {r4, r5}, {0x0, r5}, {r4}, {r4, r5}, {r3, r5}, {}, {}, {0x0, r5}, {r3}, {r3, r5}, {r3}, {r3, r5}, {r3, r5}, {r3, r5}, {}, {0x0, r5}, {r4}, {r3}, {r3}, {r4, r5}, {r4, r5}, {r3}, {r4, r5}, {r4}, {r4}, {r3, r5}, {r4, r5}, {}, {}, {r4}, {0x0, r5}, {r3, r5}, {r3, r5}, {0x0, r5}, {r4, r5}, {r3}, {r4, r5}, {r3, r5}, {r4}, {r3}, {r3}, {r4}], 0x1, "c547e63ed9668f"}) [ 108.176151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.182235] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.184616] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.190369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.193922] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 108.197382] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.238029] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 108.240269] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 108.245576] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 108.257307] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 108.260196] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 108.262429] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 108.277776] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 108.284071] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 108.288265] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 108.304365] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 108.326236] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 108.328146] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 108.335645] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 108.339373] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 108.341219] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 108.347993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 108.354063] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 108.355893] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 108.358436] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 108.361234] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 108.365256] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 108.370255] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 108.380700] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 108.382319] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 108.383102] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 108.385839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 108.388587] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 108.390020] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 108.392223] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 108.394261] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 108.394298] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 108.441459] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 108.444150] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 108.458629] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 108.468499] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 108.470401] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.557637] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 108.634251] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 108.671223] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 108.796140] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 109.060069] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 109.064233] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 110.259741] Bluetooth: hci0: command tx timeout [ 110.387260] Bluetooth: hci1: command tx timeout [ 110.451906] Bluetooth: hci6: command tx timeout [ 110.453113] Bluetooth: hci2: command tx timeout [ 110.514760] Bluetooth: hci5: command tx timeout [ 110.515844] Bluetooth: hci4: command tx timeout [ 110.516613] Bluetooth: hci3: command tx timeout [ 111.475032] Bluetooth: hci7: command tx timeout [ 112.306826] Bluetooth: hci0: command tx timeout [ 112.437197] Bluetooth: hci1: command tx timeout [ 112.499858] Bluetooth: hci2: command tx timeout [ 112.500300] Bluetooth: hci6: command tx timeout [ 112.563327] Bluetooth: hci4: command tx timeout [ 112.563790] Bluetooth: hci3: command tx timeout [ 112.564216] Bluetooth: hci5: command tx timeout [ 113.523392] Bluetooth: hci7: command tx timeout [ 114.355728] Bluetooth: hci0: command tx timeout [ 114.484347] Bluetooth: hci1: command tx timeout [ 114.546879] Bluetooth: hci2: command tx timeout [ 114.547322] Bluetooth: hci6: command tx timeout [ 114.611748] Bluetooth: hci5: command tx timeout [ 114.612203] Bluetooth: hci3: command tx timeout [ 114.612242] Bluetooth: hci4: command tx timeout [ 115.570756] Bluetooth: hci7: command tx timeout [ 116.405475] Bluetooth: hci0: command tx timeout [ 116.532742] Bluetooth: hci1: command tx timeout [ 116.595756] Bluetooth: hci6: command tx timeout [ 116.596208] Bluetooth: hci2: command tx timeout [ 116.658752] Bluetooth: hci4: command tx timeout [ 116.659940] Bluetooth: hci5: command tx timeout [ 116.660055] Bluetooth: hci3: command tx timeout [ 117.618781] Bluetooth: hci7: command tx timeout [ 166.380011] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.380782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.613085] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.613782] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.979451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.980153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.613945] syz-executor.0 (287) used greatest stack depth: 23728 bytes left [ 170.179977] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.185221] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.187862] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.205557] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.210280] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 170.212978] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 170.312583] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.317148] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.319329] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.324192] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.327352] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.330186] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.569892] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 170.580412] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 170.584918] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 170.592888] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 170.601551] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.607196] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 170.610779] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.618276] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.623051] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 170.628619] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.642562] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.645231] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.667305] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 170.675192] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 170.715354] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 170.717142] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 170.741212] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 170.745986] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 170.752837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 170.755354] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 170.757511] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 170.763309] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 170.766068] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 170.767990] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 170.778042] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 170.791960] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 170.793926] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 170.795743] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 170.806084] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 170.814231] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 170.834629] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 170.860459] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 170.889293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 170.937081] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 170.980087] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 170.984070] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 172.275814] Bluetooth: hci0: command tx timeout [ 172.402914] Bluetooth: hci1: command tx timeout [ 172.723935] Bluetooth: hci3: command tx timeout [ 172.724000] Bluetooth: hci2: command tx timeout [ 172.851692] Bluetooth: hci4: command tx timeout [ 172.915883] Bluetooth: hci7: command tx timeout [ 172.980707] Bluetooth: hci5: command tx timeout [ 173.106763] Bluetooth: hci6: command tx timeout [ 174.322772] Bluetooth: hci0: command tx timeout [ 174.450725] Bluetooth: hci1: command tx timeout [ 174.770725] Bluetooth: hci3: command tx timeout [ 174.771789] Bluetooth: hci2: command tx timeout [ 174.899724] Bluetooth: hci4: command tx timeout [ 174.963953] Bluetooth: hci7: command tx timeout [ 175.027731] Bluetooth: hci5: command tx timeout [ 175.155976] Bluetooth: hci6: command tx timeout [ 176.371827] Bluetooth: hci0: command tx timeout [ 176.499781] Bluetooth: hci1: command tx timeout [ 176.820791] Bluetooth: hci2: command tx timeout [ 176.820892] Bluetooth: hci3: command tx timeout [ 176.946735] Bluetooth: hci4: command tx timeout [ 177.011848] Bluetooth: hci7: command tx timeout [ 177.076710] Bluetooth: hci5: command tx timeout [ 177.202717] Bluetooth: hci6: command tx timeout [ 178.419151] Bluetooth: hci0: command tx timeout [ 178.547452] Bluetooth: hci1: command tx timeout [ 178.866736] Bluetooth: hci3: command tx timeout [ 178.866787] Bluetooth: hci2: command tx timeout [ 178.994863] Bluetooth: hci4: command tx timeout [ 179.058791] Bluetooth: hci7: command tx timeout [ 179.122774] Bluetooth: hci5: command tx timeout [ 179.250724] Bluetooth: hci6: command tx timeout [ 226.486711] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.487369] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.738709] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.739361] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.053155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.054267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.404705] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.405354] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.786724] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.787397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.960095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.960832] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.231082] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.231815] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.296726] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.297374] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.570179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.571009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.595786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.596404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:06:55 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x101042, 0x0) pwritev(r0, &(0x7f0000000340)=[{&(0x7f00000000c0)='\"', 0x1}], 0x1, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r2 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r1, 0x0) syz_io_uring_complete(r2) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x11) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) process_mrelease(r3, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000100000018000000", @ANYRES32=r1, @ANYRES32=0xee01, @ANYRES32=0xffffffffffffffff, @ANYBLOB="0400e94871ff0000"]) r5 = getgid() r6 = getgid() setresgid(r5, r6, 0x0) r7 = getgid() r8 = getgid() setresgid(r7, r8, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000000)='system.posix_acl_default\x00', &(0x7f0000000180)=ANY=[@ANYBLOB="02000000010000000000000002000600", @ANYRES32=0xee00, @ANYBLOB="040005000000000008000600", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=r4, @ANYBLOB="08000200", @ANYRES32=r5, @ANYBLOB="08000600", @ANYRES32=r8, @ANYBLOB="300001002000020000000040"], 0x54, 0x0) r9 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r10 = mmap$IORING_OFF_SQ_RING(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000002, 0x13, r9, 0x0) syz_io_uring_complete(r10) 18:06:55 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private1, @private2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282009f, r2}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x4, 0x7, 0x0, 0x9, 0x26, @loopback, @local, 0x1, 0x7, 0x2, 0x1}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, 0x0) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000001980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000380)={@private1, @local, @ipv4={'\x00', '\xff\xff', @private}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x282009f, r8}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'syztnl0\x00', r2, 0x0, 0x8, 0x3f, 0xffffffff, 0x2, @remote, @mcast1, 0x700, 0x7800, 0x81, 0xb3e}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="f261566687ef8bec0c57bed579a6d4", 0xf}, {&(0x7f0000000140)="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", 0xfe}, {&(0x7f0000000240)="cbd663036ac288a1cbd1cbb624e078d13ff92bbb2b3a4adb05af67053d61cddb7568fe77f441c990e09b02e901affa1e2c75e8901961eda69dc1a6caa5d6782412c4e51b78e2fa60a1530471defdd590917c7d570e8971b185e323fb4697488d2801d3e7ac94fea7ef633e04a86a6de33ab238d8604a6c32e07ebc3d57569d249bd978d4c7a260c684ab815bf7dc59789358aca79f15b9265942e677cf697aeb92e40b7f2ba0d32d84cbfa", 0xab}, {&(0x7f0000000400)="2195760c063c38ea1f7a9010126488ba31a48f4f386bc5f89f07f277f00cd2ad846ab436eff7ca669d20796a7ac916af5ed3b7cb64666eac2dfce7a1e798f148b664204a10a286484b7babc5a45f9b19d78dd8a65ce4a74ab1754c41f2f57dfa201e3c6082966618b6466153606226f187f5c9ee559c52ee7dfd623ff6a9d34745324b04365273dcd3c94adb730f3bce60fe5e1ef1df516292b511c94eb5bd062ddeac0250d127d0a1cfda4827853cddff191b8e59dcd513b1ab9416a3e1558168b6932d6cafbe6994661bcf3ab02be7395ad7453639716ec00a56e97c2c591fe34cad", 0xe3}], 0x4}}, {{&(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)="d5251a6cd6ce88c118da321318b69f4afd925ba26a161fa950157d5ee576f49e8cfce9ef7762887ad615a6e3a6fab596bc322b9fb34aba5ce7a9c41066a18a8da106613fb27c8ba045af3d44a05117f678f2563a55d2eb05b840761ef016c44673f8a38a3ec25ba438719a7440d6c11d575e639095be6736", 0x78}, {&(0x7f00000005c0)="d844b3a3233c6c6e4e7d411767669aa2b38489292fa8615d4c3e2c78bb1595027300e560a4523d8f681ec6de595c168b0c4730134fcc0dc7d09b49b1f9b50f05bb94b0716ca1a5fe4b65b4ae3e12474a85171feeb75bfc1be043235cdd1e92a561f188f975011db83c5f260566cfc0d5509b5f145dcbfcb42103d244f5119265b145a88bd3bc0145a4276c7a62e393e11ba1c9d46b5cf92160031e5cb0c2ebc1dfa7165d8eae3c96040dd7fa5a5b88eedda952a8d41d493a4045158724544ee96e8507c039413e8e237b0cc34db49351632620c7e4d0877d31a92c681d85512f68e473", 0xe3}], 0x2, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback}}}], 0x20}}, {{&(0x7f00000007c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000800)="ad3fe1d41c8db73584fedb15ce33cb00115fb286", 0x14}, {&(0x7f0000000840)="fa4f95f4909805253788bb4c600b69f79d2b81f553b700b9fb3357f9a55f90be0344cbbc67ee5937a66bd34bf7d2c00107253decaa772c67e39d73941d51f651a5ee288855a8e155e5183dc4514450742df40bbf246484c0a027b22d1525261ab2722731b1f0f761648d81e678651be4868181278595f13c6fb62f53746981ffda77e26bd5f0de2e9a80483c7c785d", 0x8f}], 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="140000000000000000000000020000000200000000000000140000000000000000000000020000000000082c000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac1e00017f000001000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="0a010100ffffffff000000002c0000000000000000000000070000000704b6ec441475f1e0000001000000087f000001000000010000000000000000140000000000000000000000070000000100000000000000540000000000000000000000070000000194040000443c70937f000001000000ace008000100000040e000000100000008ac1414bb00000a80ac1414aa00007fffe000000200000000ac14143e0000000300000000000000"], 0x110}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)="a77e2214e3e7d6dbaaf0b360e4d810be49e274f18b1b78a8912a4bb3ffa52a3840ae66d1e950dadb2a219afe40677f8d6cbf1290c654822f2b5ee340c35ad2be573d140a29a0f88ecaa842148c493acb2af62c5a14685aab", 0x58}, {&(0x7f0000000c40)="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", 0xfc}, {&(0x7f0000000d40)="549ac98058805d7f856a7705b905fcd1fb11feb52fde13ba545f5cb9e4159c59c972de7dfca717d0c555fd0fc7eb44a61e34f79b6c993976fb3da920bfe46a3f797b0dac4100f0407e7a5b3635df630f8d89b27e59c7ec26a081e287a197f8b58f3a", 0x62}, {&(0x7f0000000dc0)="158a731d9073c960af63ac5964693d8bdd8ded98446b0ac96bc224c73c843d2633609511b61bfaebf3874c10995e463524fb9c10d3d05bf1fef539c0fcf30db4275e394143a8352bd1810f9c6a5b6502a2f10d0a41021d1a38c286af1cfa5edd4a0c8d10121102c6e4a455cb040ef0d5081c", 0x72}, {&(0x7f0000000bc0)="683eaba4cb1c6f60fc610b8c27bc9bb68c6d", 0x12}, {&(0x7f0000000e40)="28dae75b9d2823252d97c254a955b87fff8e5c68ffc2dca3eaefc4da1d476f35c5c33872d93fa262d2701086efae4a304784", 0x32}, {&(0x7f0000000e80)="ed708d798c3eaf36950f36365809da5d0a69662a618baa7f3ef24a28e7e28eca59c4d64e8024dda1ae", 0x29}, {&(0x7f0000000ec0)="5405c548776cf71c9a92e2b6e293ed60541e162b035775f005b3f8b669367af3769774df28068cf953eb84d01b2edc2cfc261510c64c673664ac6d5ecac7f8e7e54cf18aaab0e0d9e0b9db98e2c5cdd1c2ca29c1af7aca8b2e64af652a99648ea31c3c2d963b537a1af71fe999a287313653310275e57a8523e1d6e1ec0b3b40f33c8ee05766b4934040aca17f873d52594eccf2cd56e8b52b41b51ab25d4d600fd199c36ffee2e810e73192", 0xac}, {&(0x7f0000000f80)="efd7599ce83584935c86bce02b1a46a629ae6d9a84f9dac9d792cf094a1837dc69468ac6787e2aa8dc2f78b8e129c39dff59bd28ee30477a48029bd7feee852c892073e3d2241f8dd655c1aca5dd01fee9193c4cc4ef219fb740c890a2e5c1ece1471d861ec8d5eb7c8712989cbbde64e87152d3450a1611c94f616dddcb05904366541471873fd7524f50fa4bbc60d4fb61f3c182a9ffc363730dcd2c4235067163f2f9328b9bf15f533cf0117845d45a5b754983899ca06b0c10eb50fc224ef3c9cbbdaf4220af710b", 0xca}], 0x9}}, {{&(0x7f0000001140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001180)="eca04daf30027c7879b514b7fcc6495c3b989406d44eecb7950116c8f3f988fc9ca619a8970e5c03df4eeace38242cb91d5d645861675a33be9f8a26919d9e88dafa63ddcc5545a9cc77ce0667dae9a4d1cf2ebd8ca76e547b9c809a4dd8ee98b66485f4df0c5f561f347b570315ff8e082d7520ad07707b100bf6494c2498a96b025d5d018d45813b0fa0920c8e7c", 0x8f}, {&(0x7f0000001240)="121b87af19b9f7c5c02ba75c8d0d0247e7ec25e9e4297cc0b598909e07ff9802ec023be94d40b21fdaed6a38def9d0393d0688bbddefbd1b46804d448751ae7bb6cfe25b77293b709e82b88cf136f2d2a465a5287971a14cdafe8ca61e05c754877716c48b3eabe5b5cf1a025d8f5eddae75294b07abb05709483837c037edb6674597164f6d022465f591dd8025f51d5d62d896191679457ce054215d3861c6407d363a2b993075893e49521c4ba2b6ffeb8997bb8b36348504acb57e746ac7069f1dc092d48a24de8399a71b964551576c10e5f63a4748", 0xd8}, {&(0x7f0000001340)="7919a4b269c2d355efdef9198e335e4014fd3021df7e400f85610d63459089a6d3e178d485490486affbdf0534e96a6a9f5e8565fe0fee84cd3ae03276f06808d7d446ee2b0a84eb7fa70d18ad082f", 0x4f}, {&(0x7f00000013c0)="dffe8687198b5b5c3013d63f68c3bff98b9eae3a3cf0a2f72ab3ad3de6378e0c18f4943da3b02979fd4703468aff3f9f8ad2aeb0094e177b4c", 0x39}, {&(0x7f0000001400)="ecc7dc078ce2935918bb7c19a0af32258d21695258db1b3d83708a3fc82d5a57cdabac458d642feb6eb7fa0848a08dbf5754e51970376d6231bc330c629902e11c4b613149895ee98e70ff06e849739638af54e0ddcb3bb34fcc1f374c481636581876", 0x63}, {&(0x7f0000001480)="b87636a19a380b899edbda49e204562eda572bbb", 0x14}, {&(0x7f00000014c0)="3c5d11e662d875b64bcb1159e1b1f2be47045d6b826cce1a8e8537dfa869b920adee6c2227445bbc7338621659cc59c756d43a50455343305594bb9b96f322b57cb2103d40f76f8bab7420e9904bd6c64293050c45e021420c73a63521fcd76d3b09208c8c5c68658efc0b3bc93523333a543f4974b3a9f1f106afc452c9e370c2082fede68d4da2d1ba9ad6", 0x8c}, {&(0x7f0000001580)="f80d6c44f48acfdba08fcf95950108bccbbf8a208fc5006323911822c63f4e79fde474dba51133fdf4081bffcdc92e2344b93e1077e3461c0c43dcd2085a35a5", 0x40}, {&(0x7f00000015c0)="016ec26a66f99d10d5ff53fc3db1cefe42b03a0de43fba7ab0dc9ad4cbe8a3525f6e90d8ad32217cfe0d4cf0083b30ef946db8c908f9738c3c30c2d41216d2b83e6607c010d77d8b4847940c4b2234d042a6be9eb770d08d71c17763f5ef5432f318d8a6b8c68379d780d7eca0e3eb3557d4f8", 0x73}], 0x9, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xc0}}], 0x5, 0x4000) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x5, 0x0, 0x0, 0xa8, 0x4000002}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000019c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @loopback, 0x8588, 0x2, 0x2, 0x0, 0x800, 0x800288, r3}) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c00), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r11, 0x324, 0x0) [ 228.799299] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.811557] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 228.835491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.836430] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:06:55 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2445cf0da3386e0000005f5f104f97462ad557729c86c36a84c8185cba4ed56de4b6a51e33dc68f6922c0409a38adb93bc0fe1861f5ea2c9269b65fe8b105d2846df81f8dd602ca25d3463b6d6ab004229099015deb48ce5328766b5086875e2b01b632d5695aecb66ef7f81ea6abc22c9d60395d89af652f28ae83a3a8ec35f9750062685", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) [ 228.993713] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.994361] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.258225] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:06:56 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r0, 0x890b, &(0x7f0000000380)={@private1, @private2, @mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x282009f, r2}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(0xffffffffffffffff, 0x89f6, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000000)={'ip6gre0\x00', r2, 0x4, 0x7, 0x0, 0x9, 0x26, @loopback, @local, 0x1, 0x7, 0x2, 0x1}}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000740)=0x14) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) r7 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000340)={'sit0\x00', 0x0}) r9 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(r9, 0x8918, 0x0) setsockopt$inet6_IPV6_PKTINFO(r9, 0x29, 0x32, &(0x7f0000001980)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, 0x14) ioctl$sock_inet6_SIOCDELRT(r6, 0x890b, &(0x7f0000000380)={@private1, @local, @ipv4={'\x00', '\xff\xff', @private}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x282009f, r8}) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r0, 0x89f7, &(0x7f00000009c0)={'ip6gre0\x00', &(0x7f0000000940)={'syztnl0\x00', r2, 0x0, 0x8, 0x3f, 0xffffffff, 0x2, @remote, @mcast1, 0x700, 0x7800, 0x81, 0xb3e}}) sendmmsg$inet(r4, &(0x7f00000017c0)=[{{&(0x7f00000000c0)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000300)=[{&(0x7f0000000100)="f261566687ef8bec0c57bed579a6d4", 0xf}, {&(0x7f0000000140)="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", 0xfe}, {&(0x7f0000000240)="cbd663036ac288a1cbd1cbb624e078d13ff92bbb2b3a4adb05af67053d61cddb7568fe77f441c990e09b02e901affa1e2c75e8901961eda69dc1a6caa5d6782412c4e51b78e2fa60a1530471defdd590917c7d570e8971b185e323fb4697488d2801d3e7ac94fea7ef633e04a86a6de33ab238d8604a6c32e07ebc3d57569d249bd978d4c7a260c684ab815bf7dc59789358aca79f15b9265942e677cf697aeb92e40b7f2ba0d32d84cbfa", 0xab}, {&(0x7f0000000400)="2195760c063c38ea1f7a9010126488ba31a48f4f386bc5f89f07f277f00cd2ad846ab436eff7ca669d20796a7ac916af5ed3b7cb64666eac2dfce7a1e798f148b664204a10a286484b7babc5a45f9b19d78dd8a65ce4a74ab1754c41f2f57dfa201e3c6082966618b6466153606226f187f5c9ee559c52ee7dfd623ff6a9d34745324b04365273dcd3c94adb730f3bce60fe5e1ef1df516292b511c94eb5bd062ddeac0250d127d0a1cfda4827853cddff191b8e59dcd513b1ab9416a3e1558168b6932d6cafbe6994661bcf3ab02be7395ad7453639716ec00a56e97c2c591fe34cad", 0xe3}], 0x4}}, {{&(0x7f0000000500)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000540)="d5251a6cd6ce88c118da321318b69f4afd925ba26a161fa950157d5ee576f49e8cfce9ef7762887ad615a6e3a6fab596bc322b9fb34aba5ce7a9c41066a18a8da106613fb27c8ba045af3d44a05117f678f2563a55d2eb05b840761ef016c44673f8a38a3ec25ba438719a7440d6c11d575e639095be6736", 0x78}, {&(0x7f00000005c0)="d844b3a3233c6c6e4e7d411767669aa2b38489292fa8615d4c3e2c78bb1595027300e560a4523d8f681ec6de595c168b0c4730134fcc0dc7d09b49b1f9b50f05bb94b0716ca1a5fe4b65b4ae3e12474a85171feeb75bfc1be043235cdd1e92a561f188f975011db83c5f260566cfc0d5509b5f145dcbfcb42103d244f5119265b145a88bd3bc0145a4276c7a62e393e11ba1c9d46b5cf92160031e5cb0c2ebc1dfa7165d8eae3c96040dd7fa5a5b88eedda952a8d41d493a4045158724544ee96e8507c039413e8e237b0cc34db49351632620c7e4d0877d31a92c681d85512f68e473", 0xe3}], 0x2, &(0x7f0000000780)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @dev={0xac, 0x14, 0x14, 0x3f}, @loopback}}}], 0x20}}, {{&(0x7f00000007c0)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000000900)=[{&(0x7f0000000800)="ad3fe1d41c8db73584fedb15ce33cb00115fb286", 0x14}, {&(0x7f0000000840)="fa4f95f4909805253788bb4c600b69f79d2b81f553b700b9fb3357f9a55f90be0344cbbc67ee5937a66bd34bf7d2c00107253decaa772c67e39d73941d51f651a5ee288855a8e155e5183dc4514450742df40bbf246484c0a027b22d1525261ab2722731b1f0f761648d81e678651be4868181278595f13c6fb62f53746981ffda77e26bd5f0de2e9a80483c7c785d", 0x8f}], 0x2, &(0x7f0000000a00)=ANY=[@ANYBLOB="140000000000000000000000020000000200000000000000140000000000000000000000020000000000082c000000001c000000000000000000000008000000", @ANYRES32=r8, @ANYBLOB="ac1e00017f000001000000001c000000000000000000000008000000", @ANYRES32=r10, @ANYBLOB="0a010100ffffffff000000002c0000000000000000000000070000000704b6ec441475f1e0000001000000087f000001000000010000000000000000140000000000000000000000070000000100000000000000540000000000000000000000070000000194040000443c70937f000001000000ace008000100000040e000000100000008ac1414bb00000a80ac1414aa00007fffe000000200000000ac14143e0000000300000000000000"], 0x110}}, {{0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000b40)="a77e2214e3e7d6dbaaf0b360e4d810be49e274f18b1b78a8912a4bb3ffa52a3840ae66d1e950dadb2a219afe40677f8d6cbf1290c654822f2b5ee340c35ad2be573d140a29a0f88ecaa842148c493acb2af62c5a14685aab", 0x58}, {&(0x7f0000000c40)="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", 0xfc}, {&(0x7f0000000d40)="549ac98058805d7f856a7705b905fcd1fb11feb52fde13ba545f5cb9e4159c59c972de7dfca717d0c555fd0fc7eb44a61e34f79b6c993976fb3da920bfe46a3f797b0dac4100f0407e7a5b3635df630f8d89b27e59c7ec26a081e287a197f8b58f3a", 0x62}, {&(0x7f0000000dc0)="158a731d9073c960af63ac5964693d8bdd8ded98446b0ac96bc224c73c843d2633609511b61bfaebf3874c10995e463524fb9c10d3d05bf1fef539c0fcf30db4275e394143a8352bd1810f9c6a5b6502a2f10d0a41021d1a38c286af1cfa5edd4a0c8d10121102c6e4a455cb040ef0d5081c", 0x72}, {&(0x7f0000000bc0)="683eaba4cb1c6f60fc610b8c27bc9bb68c6d", 0x12}, {&(0x7f0000000e40)="28dae75b9d2823252d97c254a955b87fff8e5c68ffc2dca3eaefc4da1d476f35c5c33872d93fa262d2701086efae4a304784", 0x32}, {&(0x7f0000000e80)="ed708d798c3eaf36950f36365809da5d0a69662a618baa7f3ef24a28e7e28eca59c4d64e8024dda1ae", 0x29}, {&(0x7f0000000ec0)="5405c548776cf71c9a92e2b6e293ed60541e162b035775f005b3f8b669367af3769774df28068cf953eb84d01b2edc2cfc261510c64c673664ac6d5ecac7f8e7e54cf18aaab0e0d9e0b9db98e2c5cdd1c2ca29c1af7aca8b2e64af652a99648ea31c3c2d963b537a1af71fe999a287313653310275e57a8523e1d6e1ec0b3b40f33c8ee05766b4934040aca17f873d52594eccf2cd56e8b52b41b51ab25d4d600fd199c36ffee2e810e73192", 0xac}, {&(0x7f0000000f80)="efd7599ce83584935c86bce02b1a46a629ae6d9a84f9dac9d792cf094a1837dc69468ac6787e2aa8dc2f78b8e129c39dff59bd28ee30477a48029bd7feee852c892073e3d2241f8dd655c1aca5dd01fee9193c4cc4ef219fb740c890a2e5c1ece1471d861ec8d5eb7c8712989cbbde64e87152d3450a1611c94f616dddcb05904366541471873fd7524f50fa4bbc60d4fb61f3c182a9ffc363730dcd2c4235067163f2f9328b9bf15f533cf0117845d45a5b754983899ca06b0c10eb50fc224ef3c9cbbdaf4220af710b", 0xca}], 0x9}}, {{&(0x7f0000001140)={0x2, 0x4e23, @loopback}, 0x10, &(0x7f0000001640)=[{&(0x7f0000001180)="eca04daf30027c7879b514b7fcc6495c3b989406d44eecb7950116c8f3f988fc9ca619a8970e5c03df4eeace38242cb91d5d645861675a33be9f8a26919d9e88dafa63ddcc5545a9cc77ce0667dae9a4d1cf2ebd8ca76e547b9c809a4dd8ee98b66485f4df0c5f561f347b570315ff8e082d7520ad07707b100bf6494c2498a96b025d5d018d45813b0fa0920c8e7c", 0x8f}, {&(0x7f0000001240)="121b87af19b9f7c5c02ba75c8d0d0247e7ec25e9e4297cc0b598909e07ff9802ec023be94d40b21fdaed6a38def9d0393d0688bbddefbd1b46804d448751ae7bb6cfe25b77293b709e82b88cf136f2d2a465a5287971a14cdafe8ca61e05c754877716c48b3eabe5b5cf1a025d8f5eddae75294b07abb05709483837c037edb6674597164f6d022465f591dd8025f51d5d62d896191679457ce054215d3861c6407d363a2b993075893e49521c4ba2b6ffeb8997bb8b36348504acb57e746ac7069f1dc092d48a24de8399a71b964551576c10e5f63a4748", 0xd8}, {&(0x7f0000001340)="7919a4b269c2d355efdef9198e335e4014fd3021df7e400f85610d63459089a6d3e178d485490486affbdf0534e96a6a9f5e8565fe0fee84cd3ae03276f06808d7d446ee2b0a84eb7fa70d18ad082f", 0x4f}, {&(0x7f00000013c0)="dffe8687198b5b5c3013d63f68c3bff98b9eae3a3cf0a2f72ab3ad3de6378e0c18f4943da3b02979fd4703468aff3f9f8ad2aeb0094e177b4c", 0x39}, {&(0x7f0000001400)="ecc7dc078ce2935918bb7c19a0af32258d21695258db1b3d83708a3fc82d5a57cdabac458d642feb6eb7fa0848a08dbf5754e51970376d6231bc330c629902e11c4b613149895ee98e70ff06e849739638af54e0ddcb3bb34fcc1f374c481636581876", 0x63}, {&(0x7f0000001480)="b87636a19a380b899edbda49e204562eda572bbb", 0x14}, {&(0x7f00000014c0)="3c5d11e662d875b64bcb1159e1b1f2be47045d6b826cce1a8e8537dfa869b920adee6c2227445bbc7338621659cc59c756d43a50455343305594bb9b96f322b57cb2103d40f76f8bab7420e9904bd6c64293050c45e021420c73a63521fcd76d3b09208c8c5c68658efc0b3bc93523333a543f4974b3a9f1f106afc452c9e370c2082fede68d4da2d1ba9ad6", 0x8c}, {&(0x7f0000001580)="f80d6c44f48acfdba08fcf95950108bccbbf8a208fc5006323911822c63f4e79fde474dba51133fdf4081bffcdc92e2344b93e1077e3461c0c43dcd2085a35a5", 0x40}, {&(0x7f00000015c0)="016ec26a66f99d10d5ff53fc3db1cefe42b03a0de43fba7ab0dc9ad4cbe8a3525f6e90d8ad32217cfe0d4cf0083b30ef946db8c908f9738c3c30c2d41216d2b83e6607c010d77d8b4847940c4b2234d042a6be9eb770d08d71c17763f5ef5432f318d8a6b8c68379d780d7eca0e3eb3557d4f8", 0x73}], 0x9, &(0x7f0000001700)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x80000000}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3ff}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x40}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x400}}, @ip_ttl={{0x14, 0x0, 0x2, 0x401}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}], 0xc0}}], 0x5, 0x4000) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000001900)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x41}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x0, 0x5, 0x0, 0x0, 0xa8, 0x4000002}) ioctl$sock_inet6_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f00000019c0)={@private2={0xfc, 0x2, '\x00', 0x1}, @empty, @loopback, 0x8588, 0x2, 0x2, 0x0, 0x800, 0x800288, r3}) r11 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000000c00), 0x840, 0x0) ioctl$CDROM_SEND_PACKET(r11, 0x324, 0x0) [ 229.334801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.335471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 18:06:56 executing program 4: syz_mount_image$tmpfs(&(0x7f00000006c0), &(0x7f0000000700)='./file0\x00', 0x0, 0x0, 0x0, 0x1000001, &(0x7f00000000c0)) r0 = getgid() r1 = getgid() setresgid(r0, r1, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000140), 0x98106, &(0x7f0000000080)={'trans=unix,', {[{@dfltgid={'dfltgid', 0x3d, r1}}]}}) 18:06:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8007}, 0x4) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaeaaaaaaaaaaaaaaaaa000800450000280000000000069071ac1e0001000000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x700, 0x20, 0x3, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0xf7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @remote, @remote, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xd3, [@multicast2, @loopback, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @timestamp={0x44, 0xc, 0x32, 0x0, 0x4, [0x9, 0x1]}, @timestamp={0x44, 0xc, 0x99, 0x0, 0x0, [0xffff, 0x3f]}, @lsrr={0x83, 0xb, 0x1d, [@remote, @multicast2]}, @noop]}}}}}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x8, r1, 0x1, 0x91, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10) 18:06:56 executing program 2: prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000000040)=0x1) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x4, 0x1, &(0x7f0000000000)=0x1) mbind(&(0x7f0000fec000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) mmap$IORING_OFF_CQ_RING(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000002, 0x30, r0, 0x8000000) 18:06:56 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040), 0x4) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x3, 0x8007}, 0x4) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaeaaaaaaaaaaaaaaaaa000800450000280000000000069071ac1e0001000000004e240000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0xd, 0x0, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000002c0)={'erspan0\x00', &(0x7f0000000200)={'erspan0\x00', 0x0, 0x1, 0x700, 0x20, 0x3, {{0x1e, 0x4, 0x2, 0x7, 0x78, 0x64, 0x0, 0x2, 0x2f, 0x0, @private=0xa010102, @private=0xa010100, {[@ssrr={0x89, 0x1b, 0xf7, [@broadcast, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, @remote, @remote, @rand_addr=0x64010101]}, @ra={0x94, 0x4}, @lsrr={0x83, 0x1f, 0xd3, [@multicast2, @loopback, @remote, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}, @timestamp={0x44, 0xc, 0x32, 0x0, 0x4, [0x9, 0x1]}, @timestamp={0x44, 0xc, 0x99, 0x0, 0x0, [0xffff, 0x3f]}, @lsrr={0x83, 0xb, 0x1d, [@remote, @multicast2]}, @noop]}}}}}) bind$packet(r0, &(0x7f0000000300)={0x11, 0x8, r1, 0x1, 0x91, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r2, 0x1, 0x6, @remote}, 0x10) [ 232.001854] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 232.017253] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 232.022908] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 232.043442] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 232.046962] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 232.055614] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 232.591184] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 232.598708] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 232.603133] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 232.615063] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 232.620423] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 232.623867] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 232.848295] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 232.853159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 232.856112] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 232.866196] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 232.870210] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 232.872363] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 232.880943] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.885092] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.888182] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.899088] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.930822] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.933096] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 233.180051] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 233.184124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 233.188104] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 233.223331] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 233.237978] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 233.241556] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 233.250587] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 233.255029] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 233.258193] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 233.302078] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 233.318016] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 233.329374] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 234.098861] Bluetooth: hci0: command tx timeout [ 234.674727] Bluetooth: hci1: command tx timeout [ 234.930770] Bluetooth: hci3: command tx timeout [ 234.994699] Bluetooth: hci4: command tx timeout [ 235.315025] Bluetooth: hci6: command tx timeout [ 235.571099] Bluetooth: hci7: command tx timeout [ 236.147927] Bluetooth: hci0: command tx timeout [ 236.722826] Bluetooth: hci1: command tx timeout [ 236.979051] Bluetooth: hci3: command tx timeout [ 237.043099] Bluetooth: hci4: command tx timeout [ 237.362829] Bluetooth: hci6: command tx timeout [ 237.618829] Bluetooth: hci7: command tx timeout [ 238.195048] Bluetooth: hci0: command tx timeout [ 238.770795] Bluetooth: hci1: command tx timeout [ 239.026722] Bluetooth: hci3: command tx timeout [ 239.090716] Bluetooth: hci4: command tx timeout [ 239.410721] Bluetooth: hci6: command tx timeout [ 239.666741] Bluetooth: hci7: command tx timeout [ 240.242707] Bluetooth: hci0: command tx timeout [ 240.819716] Bluetooth: hci1: command tx timeout [ 241.074786] Bluetooth: hci3: command tx timeout [ 241.139128] Bluetooth: hci4: command tx timeout [ 241.459058] Bluetooth: hci6: command tx timeout [ 241.714752] Bluetooth: hci7: command tx timeout [ 280.614359] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.615590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.926958] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.928014] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.509059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.509782] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.622414] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.623268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.927509] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 282.928889] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.071173] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.071952] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.373313] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.374526] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.469064] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.482966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 283.484136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 283.539121] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.608360] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.944082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 283.999146] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.656178] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.657413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 284.919722] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 284.920978] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.634959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.636142] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.707248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.708596] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.261393] Bluetooth: hci5: command 0x0406 tx timeout [ 294.262590] Bluetooth: hci2: command 0x0406 tx timeout 18:08:14 executing program 0: ioctl$KDFONTOP_COPY(0xffffffffffffffff, 0x4b72, &(0x7f0000000400)={0x3, 0x0, 0x401, 0x1c, 0xc6}) r0 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x2) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000440)=0x101) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000480)={0x81, 0x3f, 0x80000001, 0x6f, 0xc9, "e7c6502af92158ffddb907be0b73be7ec35892", 0x3, 0x6}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000004c0)={0x0, 0x0, 0x5, 0xfffffbff, 0x1, "d4a1b29de0af95e3520f8fc839a4266e7865cf", 0xff, 0x5}) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f0000000500)={0xff, 0xd5f5, 0x20, 0x1e, 0x1, "8cd09bcb5ee205356ffbc44a7a202e8d29bd4d", 0x0, 0x4}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000540), 0x14f800, 0x0) ioctl$KDDELIO(r1, 0x4b35, 0x80) write(r0, &(0x7f0000000580)="9b219f8a4b81ea67f4126f4c78e81a8ce85c410476e0cf928e724f7f5d18d85b099f482d28253562a688315e03e1211baa10839a91c1f4677edea4f0fd78b2db973bfed59da13e9bc6d9eb8bf1dfc9b5498b94", 0x53) r2 = syz_open_dev$tty1(0xc, 0x4, 0x4) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000600)={0x101, 0x8001, 0x7}) r3 = ioctl$TIOCGPTPEER(r0, 0x5441, 0x100) socketpair(0x1e, 0x6, 0x2, &(0x7f0000000640)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000680)=0x2000000) ioctl$TCXONC(r1, 0x540a, 0x0) ioctl$TCSETSF(r2, 0x5404, &(0x7f00000006c0)={0xffffffe1, 0x3f, 0x6, 0x0, 0x3, "2f5518c3fc24797b4b36c891bd5d22bdcf4a13"}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000700)=0x8) ioctl$TIOCGRS485(r0, 0x542e, &(0x7f0000000740)) ioctl$KDGKBLED(r3, 0x4b64, &(0x7f0000000780)) syz_open_dev$tty20(0xc, 0x4, 0x1) 18:08:14 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r2], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:08:14 executing program 4: r0 = socket$netlink(0x10, 0x3, 0xa) sendmsg$TIPC_NL_MEDIA_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[], 0x33fe0}}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x24, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @nested={0x8, 0x0, 0x0, 0x1, [@typed={0x4}]}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_LEAVE_IBSS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @val={0xc}}}}, 0x28}}, 0x0) 18:08:14 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$AUTOFS_IOC_CATATONIC(r0, 0x9362, 0x0) r1 = syz_io_uring_complete(0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000080)) syz_mount_image$ext4(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x163008, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x31240aa, &(0x7f0000000180)={[{@data_err_ignore}]}) 18:08:14 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="2445cf0da3386e0000005f5f104f97462ad557729c86c36a84c8185cba4ed56de4b6a51e33dc68f6922c0409a38adb93bc0fe1861f5ea2c9269b65fe8b105d2846df81f8dd602ca25d3463b6d6ab004229099015deb48ce5328766b5086875e2b01b632d5695aecb66ef7f81ea6abc22c9d60395d89af652f28ae83a3a8ec35f9750062685", @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r2, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={@wo_ht={{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={@wo_ht={{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 18:08:14 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init() fcntl$setstatus(r2, 0x4, 0x2800) fcntl$setlease(r1, 0x400, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000)) readahead(r0, 0x3f, 0x754) fchdir(r0) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000180)=[{&(0x7f0000000f40)="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", 0x1000, 0x1f}], 0x40000, &(0x7f0000000240)=ANY=[@ANYBLOB="695f7273696f6e2c646174615f6572723d61626f72742c6e6f6c617a7974696d652c6e6f6d6263616368652c64656275675f77616e745f65787472615f6973697a653d3078303030303030303030303030303030322c6f626a5f72ff7f00006d6f756e74696e666f002c003d3e5372026ad99b07c089e735d46d"]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x18) ioctl$FITHAW(r4, 0xc0045878) 18:08:14 executing program 7: r0 = socket$unix(0x1, 0x5, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) statx(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x1000, 0x0, &(0x7f00000001c0)) 18:08:14 executing program 1: r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x15f) write$binfmt_script(r0, &(0x7f0000000240)={'#! ', './file1'}, 0xb) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000001740)={0x18, 0x2, 0x1, 0x3, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x4, 0x2}]}, 0x18}}, 0x0) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x20, 0x2}, r2, 0xffffffffffffffff, r3, 0x0) close(r0) execveat(0xffffffffffffff9c, &(0x7f0000000480)='./file1\x00', 0x0, 0x0, 0x0) [ 308.307897] audit: type=1400 audit(1734718095.080:8): avc: denied { open } for pid=10264 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 308.316773] audit: type=1400 audit(1734718095.080:9): avc: denied { kernel } for pid=10264 comm="syz-executor.1" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 308.319886] process 'syz-executor.1' launched './file1' with NULL argv: empty string added [ 308.321887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 18:08:15 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = fork() ptrace$poke(0x5, r1, &(0x7f00000001c0), 0x99) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r2, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d8c931"}]}, 0x18}], 0x1}, 0x0) kcmp(r1, 0x0, 0x4, r2, r0) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r0, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) write(r3, &(0x7f0000000200)='E', 0x140000) [ 308.442978] loop6: detected capacity change from 0 to 8 [ 308.476182] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. 18:08:15 executing program 1: ioctl$EXT4_IOC_MIGRATE(0xffffffffffffffff, 0x6609) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = signalfd4(r0, &(0x7f0000000280), 0x8, 0x80000) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000002c0)={r1, 0x0, 0x9, 0x8}) r2 = accept4$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000040)=0x1c, 0x80800) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f00000000c0)={@mcast1, 0x26}) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x10006, @loopback={0x0, 0x2}, 0x10000404}, 0x1c) r3 = mmap$IORING_OFF_CQ_RING(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000006, 0x40010, 0xffffffffffffffff, 0x8000000) syz_io_uring_setup(0x6a46, &(0x7f0000000100)={0x0, 0xd161, 0x0, 0x1, 0x12e}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180), &(0x7f00000001c0)=0x0) r5 = openat$cgroup_devices(r1, &(0x7f0000000340)='devices.allow\x00', 0x2, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r5) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000300)=0x1, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_LINK_TIMEOUT={0xf, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)}, 0x3) [ 308.507745] EXT4-fs (sda): re-mounted 7b5d9a40-9011-49ec-8035-27953f97a4d8 r/w. Quota mode: none. 18:08:15 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="1400000010004003000000000000000000"], 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r0) [ 308.647387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.616483] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 311.622119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 311.626576] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 311.636852] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 311.641256] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 311.645583] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 313.715127] Bluetooth: hci6: command tx timeout [ 315.762895] Bluetooth: hci6: command tx timeout [ 317.810823] Bluetooth: hci6: command tx timeout [ 319.858987] Bluetooth: hci6: command tx timeout [ 340.731423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.732681] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 340.837648] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 340.838866] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.394529] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.452265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 341.515887] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 355.704801] Bluetooth: hci1: command 0x0406 tx timeout [ 355.704836] Bluetooth: hci3: command 0x0406 tx timeout [ 355.705400] Bluetooth: hci0: command 0x0406 tx timeout [ 355.706915] Bluetooth: hci7: command 0x0406 tx timeout [ 355.707407] Bluetooth: hci4: command 0x0406 tx timeout 18:09:05 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000880)) recvmsg$unix(r0, &(0x7f0000000080)={&(0x7f0000000100), 0x6e, &(0x7f0000000440)=[{&(0x7f0000000180)=""/77, 0x4d}, {}, {&(0x7f0000000200)=""/215, 0xd7}, {&(0x7f0000000300)=""/134, 0x86}, {&(0x7f00000003c0)=""/88, 0x58}], 0x5, &(0x7f00000004c0)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xe0}, 0x40000001) stat(&(0x7f0000000680)='./file1\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(0x0, r5, 0x0) sendmsg$netlink(r3, &(0x7f0000000840)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)=[{&(0x7f00000005c0)={0x240, 0x19, 0x400, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x8d, 0x0, 0x0, @uid=r5}, @nested={0x228, 0x4b, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @pid=r4}, @generic="7e655a9c476fc64c3ac44617dbb65baf8b6d050b6380ef7e526a43e66f3fb51c620e4f2c83f729cea086a3f28b1e65cf39750d7080cc90f0a84422c82e578fe078ce19146af6fec9413e39ddc81938fd3ff8e44ec59a70f51a7195d17a22c717bcd0daf6c3956387f7f5ffc4165070cb6af5d52459015f7edb462c6c8ced76486d69e414838a9d935757967cbffb00089645de70f33118d6441f093cd4fa31d19166c48d893b084b6b76706ca70305369ca602a220542139715f90a0b588e7b37aac6bf88e2cf36845e8759dba0caa1f62", @typed={0x8, 0x22, 0x0, 0x0, @fd=r2}, @generic="6dff9cabf60ee6fb7a8118017cec61f19c365c119f2e531dbc4033b959a1d6c4057aad3e0d94214fc40715e1bf729fc13bcf67ec04069339728bc1b60ebb7a3704329a757a93fbda8461151b847d05a77e33dd5df4d47d6306dcd1b4edce2f2c8eaea0639980a8ddde46cf87ca329606b9d5e26701e9a681a4f27fdac8dade8ae0122eded222d4784ebe941f3ae845c7395e8a1e42f75c610b4a5cd9b96b877f772c5a9399e6e84960ba6b8634517c5395eb2b4f12d4503c0560c7c7bb60d944723587", @typed={0x7f, 0x7c, 0x0, 0x0, @binary="1a7f70f5db46f586362d81ec06f798f6d25a8769a1b1e5563f8ca3336b2af643c9aecba04a66d30383bc2b27cc9f9004fcb26663e3e99270f123031c47bf85673af38fd7e83892afb620533df697311701ae4ee17160cade4bd209998cbfd6f89724ce8d46c679fca80732c02b89c431b8b8807dc0bcf322a66abc"}]}]}, 0x240}], 0x1, 0x0, 0x0, 0x40000}, 0xc0) fcntl$lock(r1, 0x25, &(0x7f00000000c0)={0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff}) 18:09:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg(r0, &(0x7f00000017c0)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000001800)={0x2, 0x0, @local}, 0x10) r1 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040), &(0x7f0000000080)=0x4) 18:09:05 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r2], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:05 executing program 4: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r2], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:05 executing program 6: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = inotify_init() fcntl$setstatus(r2, 0x4, 0x2800) fcntl$setlease(r1, 0x400, 0x2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000000)) readahead(r0, 0x3f, 0x754) fchdir(r0) r4 = syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f0000000140)='./file0\x00', 0x2, 0x1, &(0x7f0000000180)=[{&(0x7f0000000f40)="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", 0x1000, 0x1f}], 0x40000, &(0x7f0000000240)=ANY=[@ANYBLOB="695f7273696f6e2c646174615f6572723d61626f72742c6e6f6c617a7974696d652c6e6f6d6263616368652c64656275675f77616e745f65787472615f6973697a653d3078303030303030303030303030303030322c6f626a5f72ff7f00006d6f756e74696e666f002c003d3e5372026ad99b07c089e735d46d"]) openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x400, 0x18) ioctl$FITHAW(r4, 0xc0045878) 18:09:05 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:05 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000000040), 0x0, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000180), 0x101, 0x46ca80) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f00000001c0)={0x4, 0x6, {0x5, @usage=0xff, 0x0, 0x4, 0x0, 0x5a22, 0x0, 0x2502, 0xe4, @usage=0xff, 0x8001, 0x3, [0x0, 0x8, 0xea, 0x5, 0x8b, 0xfffffffffffffffe]}, {0x2ce, @usage, 0x0, 0x583, 0x7, 0xfffffffffffffffe, 0x200, 0x8, 0x28, @struct={0x0, 0x400}, 0xfffffff7, 0x7, [0x4, 0x2, 0x2, 0x4, 0x7fffffff, 0x4]}, {0x3, @usage=0x1, 0x0, 0x2, 0x31d, 0x7fff, 0xf7a4, 0x23, 0x10, @struct={0x0, 0x3}, 0x1, 0x100, [0x2, 0x5, 0x1, 0x3, 0x1cc, 0x10001]}, {0x794, 0x10001, 0x4}}) perf_event_open(&(0x7f0000000100)={0x2, 0x80, 0x1, 0x5, 0x20, 0x7, 0x0, 0x2, 0x40359, 0x2, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x4, @perf_bp={&(0x7f0000000000), 0xc}, 0x808, 0x200, 0x4, 0x4, 0x3, 0x0, 0xfffe, 0x0, 0x40, 0x0, 0x7f}, 0xffffffffffffffff, 0x6, r2, 0x9) r3 = fork() ptrace$poke(0x5, r3, &(0x7f00000001c0), 0x99) perf_event_open(&(0x7f0000000600)={0x3, 0x80, 0x6, 0xa, 0x0, 0x3, 0x0, 0x8, 0x40, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x4, 0x0, @perf_bp={&(0x7f00000005c0)}, 0x10000, 0x1a3a, 0x3, 0x0, 0x5, 0x2a1, 0x313e, 0x0, 0x6, 0x0, 0x9}, r3, 0xd, r0, 0x6c2bfbad4b9ae969) 18:09:05 executing program 3: getsockopt$IPT_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x0, 0x43, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='oom_adj\x00') writev(r0, &(0x7f0000000440)=[{&(0x7f00000000c0)='0', 0x1}, {&(0x7f0000000100)="e3", 0x1}], 0x2) ioctl$SCSI_IOCTL_START_UNIT(r0, 0x5) 18:09:05 executing program 5: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x240c80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 358.978661] loop6: detected capacity change from 0 to 8 18:09:05 executing program 0: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x83, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000000000007000000000000000100000000001000030000000000000001000000000000000200000000000000d10c000000000000000000000000000000000000000000000811000000000000000000000000000004000000000000008000000000004cb504844e02000080000000000000000000000000000000000000000000e48186a6c869cc8700020600000000000000000000000000000100008000000000af00000000000000040000000000000000000000000000000000000000000000050000000000000000"]) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@discard}]}) [ 358.998517] audit: type=1400 audit(1734718145.770:10): avc: denied { write } for pid=10777 comm="syz-executor.7" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 359.063952] syz-executor.3 (10790): /proc/10790/oom_adj is deprecated, please use /proc/10790/oom_score_adj instead. 18:09:05 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) [ 359.241480] No source specified 18:09:06 executing program 5: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x240c80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) [ 359.281291] No source specified 18:09:06 executing program 3: syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000100)='./file0\x00', 0x0, 0x2, &(0x7f0000000200)=[{&(0x7f0000010000)="04000000646f7366d8a02b00080101000440002000f801", 0x17}, {0x0, 0x0, 0x2840}], 0x0, &(0x7f0000000140)=ANY=[]) chdir(&(0x7f0000000140)='./file0\x00') io_setup(0xd29, &(0x7f0000000780)=0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1257c2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002840)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) io_submit(r0, 0x300, &(0x7f0000000040)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000000)='\x00', 0xf}]) mount_setattr(0xffffffffffffffff, &(0x7f0000000180)='./file1\x00', 0x9800, &(0x7f00000001c0)={0x2, 0x10000c, 0x40000, {r1}}, 0x20) 18:09:06 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r2], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:06 executing program 4: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x240c80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 18:09:06 executing program 1: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x240c80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 18:09:06 executing program 0: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x83, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000000000007000000000000000100000000001000030000000000000001000000000000000200000000000000d10c000000000000000000000000000000000000000000000811000000000000000000000000000004000000000000008000000000004cb504844e02000080000000000000000000000000000000000000000000e48186a6c869cc8700020600000000000000000000000000000100008000000000af00000000000000040000000000000000000000000000000000000000000000050000000000000000"]) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@discard}]}) [ 359.587421] loop3: detected capacity change from 0 to 40 [ 359.746156] No source specified 18:09:28 executing program 1: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x240c80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 18:09:28 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:28 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) 18:09:28 executing program 5: perf_event_open(&(0x7f0000001840)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = openat(r0, &(0x7f0000000100)='./file1\x00', 0x240c80, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x2000002, 0x401a012, r1, 0x0) pkey_mprotect(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x0, 0xffffffffffffffff) pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) 18:09:28 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r2], 0x2) socket$inet_icmp_raw(0x2, 0x3, 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:28 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) 18:09:28 executing program 3: r0 = open$dir(&(0x7f0000000100)='./file0\x00', 0x83, 0x2) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000140), &(0x7f0000000180)='./file0\x00', 0x8, 0x3) ioctl$EXT4_IOC_GET_ES_CACHE(0xffffffffffffffff, 0xc020662a, &(0x7f00000001c0)=ANY=[@ANYBLOB="040000000000000007000000000000000100000000001000030000000000000001000000000000000200000000000000d10c000000000000000000000000000000000000000000000811000000000000000000000000000004000000000000008000000000004cb504844e02000080000000000000000000000000000000000000000000e48186a6c869cc8700020600000000000000000000000000000100008000000000af00000000000000040000000000000000000000000000000000000000000000050000000000000000"]) syz_mount_image$msdos(&(0x7f0000000300), &(0x7f0000000340)='./file0\x00', 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)={[{@fat=@discard}]}) 18:09:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) [ 381.364946] No source specified 18:09:50 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:50 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) 18:09:51 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) 18:09:51 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:51 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) r1 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r3, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r3, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r2) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000040)=[r1, r2], 0x2) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:51 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:51 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) 18:09:51 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r1) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:51 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) openat$cgroup_type(r1, &(0x7f0000000100), 0x2, 0x0) 18:09:51 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:09:51 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:51 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:52 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000140)=0x1) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:52 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f0000000100)=0x80000001) ioctl$TUNSETVNETBE(r2, 0x400454de, &(0x7f0000000140)=0x1) syncfs(r1) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:52 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0xfc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) perf_event_open(&(0x7f0000000180)={0x4, 0x80, 0x0, 0x2, 0x6, 0x2, 0x0, 0x1000, 0x4084, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xffff, 0x8, @perf_bp={&(0x7f0000000100), 0x2}, 0x4, 0xff, 0x3, 0x7, 0x6, 0x6, 0x1, 0x0, 0xd8ee, 0x0, 0xea00000000}, 0xffffffffffffffff, 0x7, r1, 0xb) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1c5042, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r2, 0xc018937a, &(0x7f0000000000)={{0x1, 0x1, 0x18, r2, {0x7}}, './file0\x00'}) r4 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r4, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r3, 0x2405, r4) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x1000004, 0x813, r2, 0x0) write(r2, &(0x7f0000000200)='E', 0x140000) r5 = creat(&(0x7f0000000040)='./file0\x00', 0x0) pwrite64(r5, &(0x7f0000000140)="c0", 0x1, 0x75d6) ioctl$BTRFS_IOC_DEV_INFO(r0, 0xd000941e, &(0x7f0000000c80)={0x0, "7ea5c2d92250a81fa44256a2a5a0dcac"}) 18:09:52 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:09:52 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:09:52 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_bond\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 18:09:52 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:09:52 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:09:52 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:09:52 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:09:52 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) 18:09:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:09:53 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:15 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:15 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:15 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:15 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:15 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:10:15 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_bond\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 18:10:15 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:15 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:16 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:16 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) [ 437.618924] Bluetooth: hci6: command 0x0406 tx timeout 18:10:35 executing program 6: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_bond\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 18:10:35 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:35 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:35 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:36 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:10:36 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x82, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_io_uring_setup(0x0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x80000392}, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, 0x0, 0x0) r1 = openat$sr(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000001c0)={'bridge_slave_1\x00'}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'veth1_to_bond\x00'}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) 18:10:36 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:36 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:10:36 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:36 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:36 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:36 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:10:36 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:36 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:36 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:36 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 3: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:10:58 executing program 7: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:10:58 executing program 1: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:10:58 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:10:58 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:10:58 executing program 1: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 3: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:10:58 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:19 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:11:19 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:11:19 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:19 executing program 1: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:19 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:19 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:11:19 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:19 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:45 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:11:45 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:45 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:45 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:45 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:45 executing program 2: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:11:45 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:11:45 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') close_range(r0, 0xffffffffffffffff, 0x0) 18:11:46 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:46 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:46 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:46 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:11:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:46 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:46 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:46 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:46 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:46 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:46 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:46 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:46 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:11:46 executing program 2: r0 = io_uring_setup(0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:47 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:11:47 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:47 executing program 2: r0 = io_uring_setup(0x50d1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:47 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:11:47 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:11:47 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:12:09 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:09 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:12:09 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:09 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:09 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:12:09 executing program 2: r0 = io_uring_setup(0x50d1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:09 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:09 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:12:10 executing program 2: r0 = io_uring_setup(0x50d1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:10 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:10 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:10 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:10 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:30 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:12:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:12:30 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:30 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:30 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:30 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:30 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:30 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:30 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:12:30 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:30 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:30 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:30 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:12:30 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:12:30 executing program 7: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:31 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:31 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:12:31 executing program 6: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:12:31 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:53 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:12:53 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:12:53 executing program 6: r0 = io_uring_setup(0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:53 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:53 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:53 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:53 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:12:53 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:54 executing program 6: r0 = io_uring_setup(0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:54 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r0, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:12:54 executing program 1: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:54 executing program 3: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:12:54 executing program 0: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:12:54 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:12:54 executing program 2: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:13:17 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:13:17 executing program 2: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:13:17 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r0, 0x1, 0x48, 0x0, &(0x7f00000001c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:13:17 executing program 6: r0 = io_uring_setup(0x0, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:13:17 executing program 3: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:13:17 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:13:17 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:13:17 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:13:18 executing program 2: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:13:18 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:13:40 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:13:40 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:13:40 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:13:40 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:13:40 executing program 6: r0 = io_uring_setup(0x50d1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:13:40 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:13:40 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:13:40 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:13:41 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:13:41 executing program 5: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:13:41 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:09 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:09 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:09 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:09 executing program 1: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:09 executing program 6: r0 = io_uring_setup(0x50d1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:09 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:14:09 executing program 3: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:10 executing program 6: r0 = io_uring_setup(0x50d1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:10 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:10 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:10 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:10 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:32 executing program 7: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:32 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:32 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:32 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:14:32 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:32 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:32 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:32 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:14:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:33 executing program 7: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:33 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:33 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:33 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:14:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:14:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:56 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:56 executing program 7: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:56 executing program 6: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:14:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:14:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:14:56 executing program 7: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 18:14:56 executing program 4: r0 = perf_event_open(0x0, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 2: perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:14:56 executing program 6: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:14:56 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:15:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:15:40 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:15:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:15:40 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:15:40 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:15:40 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:15:40 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:15:40 executing program 6: io_uring_setup(0x50d1, &(0x7f0000000240)) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 18:15:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:15:40 executing program 6: io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:15:40 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:15:41 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:15:41 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:05 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:05 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:05 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:05 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:05 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:05 executing program 6: perf_event_open(&(0x7f0000000180)={0x2, 0x80, 0x79, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000004c0)='/sys/module/xz_dec', 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_int(r1, 0x1, 0x48, 0x0, &(0x7f00000001c0)) preadv(r1, &(0x7f0000000500)=[{&(0x7f0000000280)=""/9, 0x9}, {&(0x7f00000002c0)=""/33, 0x21}, {&(0x7f0000000340)=""/95, 0x5f}, {&(0x7f00000003c0)=""/227, 0xe3}], 0x4, 0x2, 0x8) socket$inet_icmp_raw(0x2, 0x3, 0x1) perf_event_open(&(0x7f0000000000)={0x5, 0x80, 0x8, 0x3, 0x6, 0x4, 0x0, 0x5f56, 0x20041, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x100, 0x1, @perf_config_ext={0x9, 0xffffffff}, 0x300, 0x7, 0x7fc, 0x2, 0x3, 0x1, 0x3f, 0x0, 0x5, 0x0, 0x9}, 0x0, 0xe, r0, 0x8) r2 = openat$sr(0xffffffffffffff9c, &(0x7f0000000080), 0x41cc00, 0x0) dup3(r2, r0, 0x80000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:05 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:05 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:05 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:05 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:06 executing program 7: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) close_range(r0, 0xffffffffffffffff, 0x0) 18:16:06 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:06 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:06 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:06 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x0, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:06 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:06 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:31 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:31 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) close_range(r0, 0xffffffffffffffff, 0x0) 18:16:31 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:31 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:31 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:31 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:31 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 18:16:31 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:31 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:31 executing program 6: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) close_range(r0, 0xffffffffffffffff, 0x0) 18:16:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 18:16:53 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) 18:16:53 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:53 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:53 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:53 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:53 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:53 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:53 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 18:16:53 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) 18:16:54 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:54 executing program 1: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) 18:16:54 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:54 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:54 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:54 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:54 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:16:54 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:54 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:54 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:16:54 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:54 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:16:55 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:17:17 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:17 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:17 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:17 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:17 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:17:17 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) [ 850.983700] Zero length message leads to an empty skb 18:17:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:17 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:17 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:38 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:17:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:38 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:38 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:38 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:38 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:38 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:38 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:39 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:17:39 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:17:39 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:17:39 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:01 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:01 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:01 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:01 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:01 executing program 1: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) close_range(r0, 0xffffffffffffffff, 0x0) 18:18:01 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:18:01 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:02 executing program 0: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:02 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:02 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:18:02 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:02 executing program 2: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:21 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:18:21 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:21 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:21 executing program 1: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:21 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(0x0, 0x0) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:21 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:21 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:21 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) close_range(r0, 0xffffffffffffffff, 0x0) 18:18:22 executing program 2: r0 = io_uring_setup(0x50d1, &(0x7f0000000240)) perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200100, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$TUNSETSNDBUF(r1, 0x400454d4, &(0x7f0000000100)=0x80000001) close_range(r0, 0xffffffffffffffff, 0x0) 18:18:22 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:22 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:22 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:18:22 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:22 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:22 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:22 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:22 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:22 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:18:22 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:22 executing program 2: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:43 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:18:43 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:43 executing program 3: clone3(0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:43 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:43 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:43 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:43 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:43 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:18:43 executing program 3: clone3(0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:18:43 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:07 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:07 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:07 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:07 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:19:07 executing program 3: clone3(0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:07 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:07 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:07 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:08 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:08 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:19:08 executing program 3: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:08 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:08 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:08 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x48, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x48}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:19:31 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:31 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:19:31 executing program 2: clone3(0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:31 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:31 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:31 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:31 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:31 executing program 3: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:32 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:19:32 executing program 3: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:32 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:32 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:32 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:32 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:32 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:32 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:58 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:58 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:58 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:58 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, 0x0) 18:19:58 executing program 7: clone3(0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:58 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:19:58 executing program 3: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:58 executing program 3: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:58 executing program 7: clone3(0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:19:58 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:19:58 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:19:59 executing program 7: clone3(0x0, 0x0) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:20:23 executing program 3: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:23 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:20:23 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:23 executing program 7: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:23 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:23 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, 0x0) 18:20:23 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:23 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:20:23 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:23 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:20:24 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:24 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:24 executing program 7: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:24 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, 0x0) 18:20:24 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:20:24 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:24 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:52 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:20:52 executing program 7: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:52 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:52 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:52 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:20:52 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:20:52 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}]}, 0x44}}, 0x0) 18:20:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:20:53 executing program 7: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:17 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:21:17 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:17 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:17 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:17 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:17 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:17 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:17 executing program 7: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:18 executing program 7: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:18 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:21:18 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:18 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:18 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:18 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:18 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:18 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:21:19 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:19 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:38 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:38 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:38 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:38 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:38 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:38 executing program 6: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:38 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:21:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:21:38 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:39 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:39 executing program 6: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:21:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:21:39 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:21:39 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:21:39 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:22:10 executing program 6: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:10 executing program 1: clone3(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:22:10 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:10 executing program 1: clone3(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:10 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 6: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:10 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:22:10 executing program 1: clone3(0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:10 executing program 1: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:34 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:34 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, 0x0) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:34 executing program 1: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:34 executing program 2: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:22:34 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:34 executing program 6: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:34 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:34 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:22:34 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, 0x0) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:22:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:22:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:22:34 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:02 executing program 1: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 0: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, 0x0) read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:02 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 6: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:02 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:02 executing program 1: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 6: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:02 executing program 1: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 6: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:02 executing program 1: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:02 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:03 executing program 6: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:03 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:03 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:03 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:03 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:03 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:03 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:03 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:03 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:33 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:33 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:33 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:33 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:33 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:33 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:33 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:33 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:34 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:34 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:34 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, 0x0) 18:23:34 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:34 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:34 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, 0x0, 0x0) 18:23:34 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:59 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, 0x0, 0x0) 18:23:59 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:59 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, 0x0) 18:23:59 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, 0x0) 18:23:59 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:23:59 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:23:59 executing program 5: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, 0x0, 0x0) 18:23:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:59 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, 0x0, 0x0) 18:23:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:59 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) 18:23:59 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:23:59 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, 0x0) 18:23:59 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 18:24:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 18:24:00 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:00 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:24:27 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:27 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:24:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) 18:24:27 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, 0x0) 18:24:27 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) 18:24:27 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, 0x0) 18:24:27 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:27 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, 0x0) 18:24:27 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:24:27 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) 18:24:28 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:28 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, 0x0) 18:24:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:24:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:24:28 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:28 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:56 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, 0x0) 18:24:56 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:56 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, 0x0) 18:24:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:24:56 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) 18:24:56 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:56 executing program 3: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, 0x0, 0x0) 18:24:56 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:24:56 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, 0x0) 18:24:56 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:24:56 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:24:56 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:24:56 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:26 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, 0x0) read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:25:26 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:25:26 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:25:26 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:26 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:26 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:25:26 executing program 7: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:25:26 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:25:53 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:25:53 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, 0x0) read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:25:53 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:25:53 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:53 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:53 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:53 executing program 4: perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:25:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:25:53 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:53 executing program 6: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:25:53 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:25:53 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:26:35 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:26:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:26:35 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) 18:26:35 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:26:35 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:26:35 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:26:35 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:26:35 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:26:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) [ 1408.606766] FAULT_INJECTION: forcing a failure. [ 1408.606766] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1408.608875] CPU: 1 UID: 0 PID: 13176 Comm: syz-executor.6 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1408.608972] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1408.609016] Call Trace: [ 1408.609036] [ 1408.609063] dump_stack_lvl+0xfa/0x120 [ 1408.609176] should_fail_ex+0x4d7/0x5e0 [ 1408.609307] _copy_from_user+0x30/0xd0 [ 1408.609405] copy_clone_args_from_user+0x147/0x780 [ 1408.609529] ? ksys_write+0x122/0x240 [ 1408.609655] ? srso_return_thunk+0x5/0x5f [ 1408.609741] ? lock_release+0x20f/0x6f0 [ 1408.609854] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1408.609975] ? ksys_write+0x188/0x240 [ 1408.610101] ? srso_return_thunk+0x5/0x5f [ 1408.610185] ? lock_release+0x20f/0x6f0 [ 1408.610300] ? __pfx_lock_release+0x10/0x10 [ 1408.610407] ? lock_is_held_type+0x9e/0x120 [ 1408.610498] ? srso_return_thunk+0x5/0x5f [ 1408.610582] ? srso_return_thunk+0x5/0x5f [ 1408.610684] __do_sys_clone3+0x91/0x260 [ 1408.610816] ? __pfx___do_sys_clone3+0x10/0x10 [ 1408.610945] ? vfs_write+0x3/0x10b0 [ 1408.611075] ? lock_acquire+0x32/0xc0 [ 1408.611185] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1408.611283] ? srso_return_thunk+0x5/0x5f [ 1408.611368] ? __fget_files+0x206/0x3b0 [ 1408.611508] ? srso_return_thunk+0x5/0x5f [ 1408.611607] ? fput+0x8b/0x400 [ 1408.611691] ? srso_return_thunk+0x5/0x5f [ 1408.611775] ? ksys_write+0x1b1/0x240 [ 1408.611903] ? __pfx_ksys_write+0x10/0x10 [ 1408.612065] do_syscall_64+0xbf/0x1d0 [ 1408.612167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.612271] RIP: 0033:0x7f905ca0bb19 [ 1408.612326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1408.612407] RSP: 002b:00007f9059f81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1408.612483] RAX: ffffffffffffffda RBX: 00007f905cb1ef60 RCX: 00007f905ca0bb19 [ 1408.612541] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1408.612595] RBP: 00007f9059f811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1408.612648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1408.612701] R13: 00007ffdbe63ceaf R14: 00007f9059f81300 R15: 0000000000022000 [ 1408.612808] 18:26:35 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:26:35 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) 18:26:35 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:26:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:26:35 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) 18:26:35 executing program 4: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') [ 1409.012084] FAULT_INJECTION: forcing a failure. [ 1409.012084] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.014381] CPU: 1 UID: 0 PID: 13193 Comm: syz-executor.7 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1409.014478] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.014522] Call Trace: [ 1409.014543] [ 1409.014570] dump_stack_lvl+0xfa/0x120 [ 1409.014661] should_fail_ex+0x4d7/0x5e0 [ 1409.014786] _copy_from_user+0x30/0xd0 [ 1409.014884] copy_clone_args_from_user+0x147/0x780 [ 1409.015008] ? ksys_write+0x122/0x240 [ 1409.015134] ? srso_return_thunk+0x5/0x5f [ 1409.015220] ? lock_release+0x20f/0x6f0 [ 1409.015339] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1409.015461] ? ksys_write+0x188/0x240 [ 1409.015586] ? srso_return_thunk+0x5/0x5f [ 1409.015681] ? lock_release+0x20f/0x6f0 [ 1409.015796] ? __pfx_lock_release+0x10/0x10 [ 1409.015903] ? lock_is_held_type+0x9e/0x120 [ 1409.015994] ? srso_return_thunk+0x5/0x5f [ 1409.016079] ? srso_return_thunk+0x5/0x5f [ 1409.016180] __do_sys_clone3+0x91/0x260 [ 1409.016312] ? __pfx___do_sys_clone3+0x10/0x10 [ 1409.016442] ? vfs_write+0x3/0x10b0 [ 1409.016571] ? lock_acquire+0x32/0xc0 [ 1409.016681] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1409.016779] ? srso_return_thunk+0x5/0x5f [ 1409.016868] ? __fget_files+0x206/0x3b0 [ 1409.017009] ? srso_return_thunk+0x5/0x5f [ 1409.017093] ? fput+0x8b/0x400 [ 1409.017177] ? srso_return_thunk+0x5/0x5f [ 1409.017262] ? ksys_write+0x1b1/0x240 [ 1409.017390] ? __pfx_ksys_write+0x10/0x10 [ 1409.017552] do_syscall_64+0xbf/0x1d0 [ 1409.017653] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.017757] RIP: 0033:0x7f0369f0ab19 [ 1409.017812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.017894] RSP: 002b:00007f0367480188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.017970] RAX: ffffffffffffffda RBX: 00007f036a01df60 RCX: 00007f0369f0ab19 [ 1409.018028] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1409.018081] RBP: 00007f03674801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.018135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.018188] R13: 00007ffc32b76cef R14: 00007f0367480300 R15: 0000000000022000 [ 1409.018295] [ 1409.071039] FAULT_INJECTION: forcing a failure. [ 1409.071039] name failslab, interval 1, probability 0, space 0, times 1 [ 1409.072035] CPU: 0 UID: 0 PID: 13195 Comm: syz-executor.6 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1409.072083] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.072105] Call Trace: [ 1409.072115] [ 1409.072129] dump_stack_lvl+0xfa/0x120 [ 1409.072174] should_fail_ex+0x4d7/0x5e0 [ 1409.072237] should_failslab+0xc2/0x120 [ 1409.072312] kmem_cache_alloc_node_noprof+0x72/0x3e0 [ 1409.072376] ? lock_acquire+0x32/0xc0 [ 1409.072429] ? copy_process+0x440/0x70e0 [ 1409.072494] ? srso_return_thunk+0x5/0x5f [ 1409.072544] copy_process+0x440/0x70e0 [ 1409.072608] ? srso_return_thunk+0x5/0x5f [ 1409.072650] ? lock_release+0x20f/0x6f0 [ 1409.072707] ? __pfx_lock_release+0x10/0x10 [ 1409.072761] ? trace_lock_acquire+0x13b/0x1b0 [ 1409.072819] ? __pfx_copy_process+0x10/0x10 [ 1409.072892] ? srso_return_thunk+0x5/0x5f [ 1409.072935] ? _copy_from_user+0x5b/0xd0 [ 1409.072990] kernel_clone+0xeb/0x850 [ 1409.073053] ? srso_return_thunk+0x5/0x5f [ 1409.073095] ? lock_release+0x20f/0x6f0 [ 1409.073151] ? __pfx_kernel_clone+0x10/0x10 [ 1409.073237] ? srso_return_thunk+0x5/0x5f [ 1409.073279] ? srso_return_thunk+0x5/0x5f [ 1409.073330] __do_sys_clone3+0x1d9/0x260 [ 1409.073396] ? __pfx___do_sys_clone3+0x10/0x10 [ 1409.073461] ? vfs_write+0x3/0x10b0 [ 1409.073551] ? srso_return_thunk+0x5/0x5f [ 1409.073594] ? fput+0x8b/0x400 [ 1409.073635] ? srso_return_thunk+0x5/0x5f [ 1409.073678] ? ksys_write+0x1b1/0x240 [ 1409.073742] ? __pfx_ksys_write+0x10/0x10 [ 1409.073823] do_syscall_64+0xbf/0x1d0 [ 1409.073874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.073926] RIP: 0033:0x7f905ca0bb19 [ 1409.073953] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.073994] RSP: 002b:00007f9059f81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.074032] RAX: ffffffffffffffda RBX: 00007f905cb1ef60 RCX: 00007f905ca0bb19 [ 1409.074061] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1409.074088] RBP: 00007f9059f811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.074115] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.074141] R13: 00007ffdbe63ceaf R14: 00007f9059f81300 R15: 0000000000022000 [ 1409.074195] 18:26:35 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:26:36 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) 18:26:36 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:26:36 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 1409.364097] FAULT_INJECTION: forcing a failure. [ 1409.364097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1409.365211] CPU: 0 UID: 0 PID: 13211 Comm: syz-executor.3 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1409.365260] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.365283] Call Trace: [ 1409.365298] [ 1409.365311] dump_stack_lvl+0xfa/0x120 [ 1409.365360] should_fail_ex+0x4d7/0x5e0 [ 1409.365424] _copy_from_user+0x30/0xd0 [ 1409.365474] copy_clone_args_from_user+0x147/0x780 [ 1409.365537] ? ksys_write+0x122/0x240 [ 1409.365601] ? srso_return_thunk+0x5/0x5f [ 1409.365644] ? lock_release+0x20f/0x6f0 [ 1409.365701] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1409.365762] ? ksys_write+0x188/0x240 [ 1409.365825] ? srso_return_thunk+0x5/0x5f [ 1409.365867] ? lock_release+0x20f/0x6f0 [ 1409.365925] ? __pfx_lock_release+0x10/0x10 [ 1409.365979] ? lock_is_held_type+0x9e/0x120 [ 1409.366024] ? srso_return_thunk+0x5/0x5f [ 1409.366066] ? srso_return_thunk+0x5/0x5f [ 1409.366117] __do_sys_clone3+0x91/0x260 [ 1409.366183] ? __pfx___do_sys_clone3+0x10/0x10 [ 1409.366248] ? vfs_write+0x3/0x10b0 [ 1409.366313] ? lock_acquire+0x32/0xc0 [ 1409.366368] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1409.366417] ? srso_return_thunk+0x5/0x5f [ 1409.366460] ? __fget_files+0x206/0x3b0 [ 1409.366530] ? srso_return_thunk+0x5/0x5f [ 1409.366573] ? fput+0x8b/0x400 [ 1409.366614] ? srso_return_thunk+0x5/0x5f [ 1409.366657] ? ksys_write+0x1b1/0x240 [ 1409.366721] ? __pfx_ksys_write+0x10/0x10 [ 1409.366802] do_syscall_64+0xbf/0x1d0 [ 1409.366853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.366906] RIP: 0033:0x7fe7a1c66b19 [ 1409.366934] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.366975] RSP: 002b:00007fe79f1dc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.367014] RAX: ffffffffffffffda RBX: 00007fe7a1d79f60 RCX: 00007fe7a1c66b19 [ 1409.367042] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1409.367069] RBP: 00007fe79f1dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.367096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.367122] R13: 00007fff1456593f R14: 00007fe79f1dc300 R15: 0000000000022000 [ 1409.367176] 18:26:36 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) 18:26:36 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:26:36 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) [ 1409.743012] FAULT_INJECTION: forcing a failure. [ 1409.743012] name failslab, interval 1, probability 0, space 0, times 0 [ 1409.745138] CPU: 1 UID: 0 PID: 13228 Comm: syz-executor.7 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1409.745235] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1409.745279] Call Trace: [ 1409.745306] [ 1409.745333] dump_stack_lvl+0xfa/0x120 [ 1409.745426] should_fail_ex+0x4d7/0x5e0 [ 1409.745550] should_failslab+0xc2/0x120 [ 1409.745690] kmem_cache_alloc_node_noprof+0x72/0x3e0 [ 1409.745817] ? lock_acquire+0x32/0xc0 [ 1409.745924] ? copy_process+0x440/0x70e0 [ 1409.746055] ? srso_return_thunk+0x5/0x5f [ 1409.746155] copy_process+0x440/0x70e0 [ 1409.746281] ? srso_return_thunk+0x5/0x5f [ 1409.746366] ? lock_release+0x20f/0x6f0 [ 1409.746481] ? __pfx_lock_release+0x10/0x10 [ 1409.746588] ? trace_lock_acquire+0x13b/0x1b0 [ 1409.746704] ? __pfx_copy_process+0x10/0x10 [ 1409.746851] ? srso_return_thunk+0x5/0x5f [ 1409.746936] ? _copy_from_user+0x5b/0xd0 [ 1409.747046] kernel_clone+0xeb/0x850 [ 1409.747171] ? srso_return_thunk+0x5/0x5f [ 1409.747256] ? lock_release+0x20f/0x6f0 [ 1409.747368] ? __pfx_kernel_clone+0x10/0x10 [ 1409.747538] ? srso_return_thunk+0x5/0x5f [ 1409.747623] ? srso_return_thunk+0x5/0x5f [ 1409.747741] __do_sys_clone3+0x1d9/0x260 [ 1409.747873] ? __pfx___do_sys_clone3+0x10/0x10 [ 1409.748002] ? vfs_write+0x3/0x10b0 [ 1409.748182] ? srso_return_thunk+0x5/0x5f [ 1409.748267] ? fput+0x8b/0x400 [ 1409.748351] ? srso_return_thunk+0x5/0x5f [ 1409.748435] ? ksys_write+0x1b1/0x240 [ 1409.748564] ? __pfx_ksys_write+0x10/0x10 [ 1409.748725] do_syscall_64+0xbf/0x1d0 [ 1409.748827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1409.748931] RIP: 0033:0x7f0369f0ab19 [ 1409.748986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1409.749067] RSP: 002b:00007f0367480188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1409.749143] RAX: ffffffffffffffda RBX: 00007f036a01df60 RCX: 00007f0369f0ab19 [ 1409.749201] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1409.749255] RBP: 00007f03674801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1409.749308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1409.749361] R13: 00007ffc32b76cef R14: 00007f0367480300 R15: 0000000000022000 [ 1409.749467] 18:27:04 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:27:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:27:04 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:04 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(0xffffffffffffffff, &(0x7f0000000040)=""/169, 0x200000e9) 18:27:04 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) 18:27:04 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:27:04 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:04 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') [ 1437.611874] FAULT_INJECTION: forcing a failure. [ 1437.611874] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1437.614045] CPU: 0 UID: 0 PID: 13251 Comm: syz-executor.4 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1437.614136] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1437.614177] Call Trace: [ 1437.614196] [ 1437.614221] dump_stack_lvl+0xfa/0x120 [ 1437.614315] should_fail_ex+0x4d7/0x5e0 [ 1437.614432] _copy_from_user+0x30/0xd0 [ 1437.614524] copy_clone_args_from_user+0x147/0x780 [ 1437.614640] ? ksys_write+0x122/0x240 [ 1437.614758] ? srso_return_thunk+0x5/0x5f [ 1437.614838] ? lock_release+0x20f/0x6f0 [ 1437.614943] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1437.615056] ? ksys_write+0x188/0x240 [ 1437.615173] ? srso_return_thunk+0x5/0x5f [ 1437.615252] ? lock_release+0x20f/0x6f0 [ 1437.615359] ? __pfx_lock_release+0x10/0x10 [ 1437.615459] ? lock_is_held_type+0x9e/0x120 [ 1437.615543] ? srso_return_thunk+0x5/0x5f [ 1437.615622] ? srso_return_thunk+0x5/0x5f [ 1437.615717] __do_sys_clone3+0x91/0x260 [ 1437.615840] ? __pfx___do_sys_clone3+0x10/0x10 [ 1437.615961] ? vfs_write+0x3/0x10b0 [ 1437.616081] ? lock_acquire+0x32/0xc0 [ 1437.616184] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1437.616275] ? srso_return_thunk+0x5/0x5f [ 1437.616355] ? __fget_files+0x206/0x3b0 [ 1437.616485] ? srso_return_thunk+0x5/0x5f [ 1437.616564] ? fput+0x8b/0x400 [ 1437.616655] ? srso_return_thunk+0x5/0x5f [ 1437.616734] ? ksys_write+0x1b1/0x240 [ 1437.616853] ? __pfx_ksys_write+0x10/0x10 [ 1437.617004] do_syscall_64+0xbf/0x1d0 [ 1437.617098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.617196] RIP: 0033:0x7ff8d0b7eb19 [ 1437.617247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1437.617323] RSP: 002b:00007ff8ce0f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1437.617394] RAX: ffffffffffffffda RBX: 00007ff8d0c91f60 RCX: 00007ff8d0b7eb19 [ 1437.617448] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1437.617498] RBP: 00007ff8ce0f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1437.617548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.617597] R13: 00007ffe4d70445f R14: 00007ff8ce0f4300 R15: 0000000000022000 [ 1437.617697] [ 1437.655752] FAULT_INJECTION: forcing a failure. [ 1437.655752] name failslab, interval 1, probability 0, space 0, times 0 [ 1437.657592] CPU: 0 UID: 0 PID: 13252 Comm: syz-executor.3 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1437.657682] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1437.657722] Call Trace: [ 1437.657741] [ 1437.657766] dump_stack_lvl+0xfa/0x120 [ 1437.657848] should_fail_ex+0x4d7/0x5e0 [ 1437.657963] should_failslab+0xc2/0x120 [ 1437.658094] kmem_cache_alloc_node_noprof+0x72/0x3e0 [ 1437.658212] ? lock_acquire+0x32/0xc0 [ 1437.658317] ? copy_process+0x440/0x70e0 [ 1437.658440] ? srso_return_thunk+0x5/0x5f [ 1437.658532] copy_process+0x440/0x70e0 [ 1437.658650] ? srso_return_thunk+0x5/0x5f [ 1437.658729] ? lock_release+0x20f/0x6f0 [ 1437.658835] ? __pfx_lock_release+0x10/0x10 [ 1437.658935] ? trace_lock_acquire+0x13b/0x1b0 [ 1437.659043] ? __pfx_copy_process+0x10/0x10 [ 1437.659178] ? srso_return_thunk+0x5/0x5f [ 1437.659257] ? _copy_from_user+0x5b/0xd0 [ 1437.659359] kernel_clone+0xeb/0x850 [ 1437.659476] ? srso_return_thunk+0x5/0x5f [ 1437.659556] ? lock_release+0x20f/0x6f0 [ 1437.659660] ? __pfx_kernel_clone+0x10/0x10 [ 1437.659818] ? srso_return_thunk+0x5/0x5f [ 1437.659898] ? srso_return_thunk+0x5/0x5f [ 1437.659997] __do_sys_clone3+0x1d9/0x260 [ 1437.660120] ? __pfx___do_sys_clone3+0x10/0x10 [ 1437.660241] ? vfs_write+0x3/0x10b0 [ 1437.660408] ? srso_return_thunk+0x5/0x5f [ 1437.660487] ? fput+0x8b/0x400 [ 1437.660565] ? srso_return_thunk+0x5/0x5f [ 1437.660655] ? ksys_write+0x1b1/0x240 [ 1437.660774] ? __pfx_ksys_write+0x10/0x10 [ 1437.660925] do_syscall_64+0xbf/0x1d0 [ 1437.661019] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.661116] RIP: 0033:0x7fe7a1c66b19 [ 1437.661167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1437.661242] RSP: 002b:00007fe79f1dc188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1437.661313] RAX: ffffffffffffffda RBX: 00007fe7a1d79f60 RCX: 00007fe7a1c66b19 [ 1437.661367] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1437.661417] RBP: 00007fe79f1dc1d0 R08: 0000000000000000 R09: 0000000000000000 [ 1437.661467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1437.661516] R13: 00007fff1456593f R14: 00007fe79f1dc300 R15: 0000000000022000 [ 1437.661615] 18:27:04 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:27:04 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) 18:27:04 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:04 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) [ 1438.129543] FAULT_INJECTION: forcing a failure. [ 1438.129543] name failslab, interval 1, probability 0, space 0, times 0 [ 1438.131476] CPU: 0 UID: 0 PID: 13270 Comm: syz-executor.4 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1438.131567] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1438.131608] Call Trace: [ 1438.131627] [ 1438.131653] dump_stack_lvl+0xfa/0x120 [ 1438.131741] should_fail_ex+0x4d7/0x5e0 [ 1438.131858] should_failslab+0xc2/0x120 [ 1438.131989] kmem_cache_alloc_node_noprof+0x72/0x3e0 [ 1438.132108] ? lock_acquire+0x32/0xc0 [ 1438.132207] ? copy_process+0x440/0x70e0 [ 1438.132338] ? srso_return_thunk+0x5/0x5f [ 1438.132431] copy_process+0x440/0x70e0 [ 1438.132549] ? srso_return_thunk+0x5/0x5f [ 1438.132639] ? lock_release+0x20f/0x6f0 [ 1438.132746] ? __pfx_lock_release+0x10/0x10 [ 1438.132846] ? trace_lock_acquire+0x13b/0x1b0 [ 1438.132953] ? __pfx_copy_process+0x10/0x10 [ 1438.133088] ? srso_return_thunk+0x5/0x5f [ 1438.133167] ? _copy_from_user+0x5b/0xd0 [ 1438.133270] kernel_clone+0xeb/0x850 [ 1438.133387] ? srso_return_thunk+0x5/0x5f [ 1438.133466] ? lock_release+0x20f/0x6f0 [ 1438.133571] ? __pfx_kernel_clone+0x10/0x10 [ 1438.133729] ? srso_return_thunk+0x5/0x5f [ 1438.133808] ? srso_return_thunk+0x5/0x5f [ 1438.133902] __do_sys_clone3+0x1d9/0x260 [ 1438.134026] ? __pfx___do_sys_clone3+0x10/0x10 [ 1438.134146] ? vfs_write+0x3/0x10b0 [ 1438.134314] ? srso_return_thunk+0x5/0x5f [ 1438.134393] ? fput+0x8b/0x400 [ 1438.134471] ? srso_return_thunk+0x5/0x5f [ 1438.134550] ? ksys_write+0x1b1/0x240 [ 1438.134669] ? __pfx_ksys_write+0x10/0x10 [ 1438.134820] do_syscall_64+0xbf/0x1d0 [ 1438.134914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1438.135011] RIP: 0033:0x7ff8d0b7eb19 [ 1438.135062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1438.135138] RSP: 002b:00007ff8ce0f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1438.135210] RAX: ffffffffffffffda RBX: 00007ff8d0c91f60 RCX: 00007ff8d0b7eb19 [ 1438.135264] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1438.135313] RBP: 00007ff8ce0f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1438.135363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1438.135413] R13: 00007ffe4d70445f R14: 00007ff8ce0f4300 R15: 0000000000022000 [ 1438.135512] 18:27:31 executing program 3: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:31 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) 18:27:31 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:31 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:27:31 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:31 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, 0x0) 18:27:31 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:27:31 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 1465.024069] FAULT_INJECTION: forcing a failure. [ 1465.024069] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.025146] CPU: 0 UID: 0 PID: 13292 Comm: syz-executor.7 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1465.025195] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.025218] Call Trace: [ 1465.025229] [ 1465.025243] dump_stack_lvl+0xfa/0x120 [ 1465.025296] should_fail_ex+0x4d7/0x5e0 [ 1465.025361] should_fail_alloc_page+0xe0/0x110 [ 1465.025437] prepare_alloc_pages+0x178/0x500 [ 1465.025485] ? srso_return_thunk+0x5/0x5f [ 1465.025536] __alloc_frozen_pages_noprof+0x180/0x1f90 [ 1465.025614] ? srso_return_thunk+0x5/0x5f [ 1465.025656] ? __mod_memcg_lruvec_state+0x4c1/0x640 [ 1465.025729] ? srso_return_thunk+0x5/0x5f [ 1465.025782] ? srso_return_thunk+0x5/0x5f [ 1465.025827] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1465.025888] ? srso_return_thunk+0x5/0x5f [ 1465.025951] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1465.026018] ? srso_return_thunk+0x5/0x5f [ 1465.026060] ? __create_object+0x59/0x80 [ 1465.026111] ? srso_return_thunk+0x5/0x5f [ 1465.026153] ? trace_kmem_cache_alloc+0x24/0xb0 [ 1465.026200] ? srso_return_thunk+0x5/0x5f [ 1465.026243] ? kmem_cache_alloc_node_noprof+0x1b3/0x3e0 [ 1465.026306] ? lock_acquire.part.0+0x2f0/0x320 [ 1465.026364] ? copy_process+0x440/0x70e0 [ 1465.026435] __alloc_pages_noprof+0xc/0x1b0 [ 1465.026495] copy_process+0x4d4/0x70e0 [ 1465.026559] ? srso_return_thunk+0x5/0x5f [ 1465.026601] ? lock_release+0x20f/0x6f0 [ 1465.026659] ? __pfx_lock_release+0x10/0x10 [ 1465.026712] ? trace_lock_acquire+0x13b/0x1b0 [ 1465.026770] ? __pfx_copy_process+0x10/0x10 [ 1465.026843] ? srso_return_thunk+0x5/0x5f [ 1465.026885] ? _copy_from_user+0x5b/0xd0 [ 1465.026941] kernel_clone+0xeb/0x850 [ 1465.027004] ? srso_return_thunk+0x5/0x5f [ 1465.027047] ? lock_release+0x20f/0x6f0 [ 1465.027103] ? __pfx_kernel_clone+0x10/0x10 [ 1465.027188] ? srso_return_thunk+0x5/0x5f [ 1465.027230] ? srso_return_thunk+0x5/0x5f [ 1465.027281] __do_sys_clone3+0x1d9/0x260 [ 1465.027347] ? __pfx___do_sys_clone3+0x10/0x10 [ 1465.027412] ? vfs_write+0x3/0x10b0 [ 1465.027503] ? srso_return_thunk+0x5/0x5f [ 1465.027545] ? fput+0x8b/0x400 [ 1465.027587] ? srso_return_thunk+0x5/0x5f [ 1465.027630] ? ksys_write+0x1b1/0x240 [ 1465.027694] ? __pfx_ksys_write+0x10/0x10 [ 1465.027774] do_syscall_64+0xbf/0x1d0 [ 1465.027826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.027879] RIP: 0033:0x7f0369f0ab19 [ 1465.027907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.027947] RSP: 002b:00007f0367480188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1465.027986] RAX: ffffffffffffffda RBX: 00007f036a01df60 RCX: 00007f0369f0ab19 [ 1465.028015] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1465.028042] RBP: 00007f03674801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.028069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.028096] R13: 00007ffc32b76cef R14: 00007f0367480300 R15: 0000000000022000 [ 1465.028150] [ 1465.057197] FAULT_INJECTION: forcing a failure. [ 1465.057197] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.058188] CPU: 0 UID: 0 PID: 13295 Comm: syz-executor.6 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1465.058242] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.058263] Call Trace: [ 1465.058276] [ 1465.058290] dump_stack_lvl+0xfa/0x120 [ 1465.058335] should_fail_ex+0x4d7/0x5e0 [ 1465.058395] ? prepare_creds+0x2e/0x760 [ 1465.058463] should_failslab+0xc2/0x120 [ 1465.058533] kmem_cache_alloc_noprof+0x60/0x3d0 [ 1465.058594] ? srso_return_thunk+0x5/0x5f [ 1465.058637] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 1465.058704] prepare_creds+0x2e/0x760 [ 1465.058770] ? __pfx_get_random_u64+0x10/0x10 [ 1465.058820] copy_creds+0x7a/0xa20 [ 1465.058889] ? srso_return_thunk+0x5/0x5f [ 1465.058939] copy_process+0xf37/0x70e0 [ 1465.059002] ? srso_return_thunk+0x5/0x5f [ 1465.059045] ? lock_release+0x20f/0x6f0 [ 1465.059102] ? __pfx_lock_release+0x10/0x10 [ 1465.059156] ? trace_lock_acquire+0x13b/0x1b0 [ 1465.059214] ? __pfx_copy_process+0x10/0x10 [ 1465.059286] ? srso_return_thunk+0x5/0x5f [ 1465.059329] ? _copy_from_user+0x5b/0xd0 [ 1465.059384] kernel_clone+0xeb/0x850 [ 1465.059447] ? srso_return_thunk+0x5/0x5f [ 1465.059489] ? lock_release+0x20f/0x6f0 [ 1465.059545] ? __pfx_kernel_clone+0x10/0x10 [ 1465.059631] ? srso_return_thunk+0x5/0x5f [ 1465.059673] ? srso_return_thunk+0x5/0x5f [ 1465.059724] __do_sys_clone3+0x1d9/0x260 [ 1465.059790] ? __pfx___do_sys_clone3+0x10/0x10 [ 1465.059855] ? vfs_write+0x3/0x10b0 [ 1465.059945] ? srso_return_thunk+0x5/0x5f [ 1465.059988] ? fput+0x8b/0x400 [ 1465.060030] ? srso_return_thunk+0x5/0x5f [ 1465.060072] ? ksys_write+0x1b1/0x240 [ 1465.060136] ? __pfx_ksys_write+0x10/0x10 [ 1465.060217] do_syscall_64+0xbf/0x1d0 [ 1465.060268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.060319] RIP: 0033:0x7f905ca0bb19 [ 1465.060347] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.060387] RSP: 002b:00007f9059f81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1465.060426] RAX: ffffffffffffffda RBX: 00007f905cb1ef60 RCX: 00007f905ca0bb19 [ 1465.060454] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1465.060481] RBP: 00007f9059f811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.060508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.060534] R13: 00007ffdbe63ceaf R14: 00007f9059f81300 R15: 0000000000022000 [ 1465.060588] 18:27:31 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:32 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:27:32 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:27:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) [ 1465.381175] FAULT_INJECTION: forcing a failure. [ 1465.381175] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.382192] CPU: 0 UID: 0 PID: 13318 Comm: syz-executor.7 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1465.382241] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.382264] Call Trace: [ 1465.382278] [ 1465.382292] dump_stack_lvl+0xfa/0x120 [ 1465.382342] should_fail_ex+0x4d7/0x5e0 [ 1465.382405] ? prepare_creds+0x2e/0x760 [ 1465.382474] should_failslab+0xc2/0x120 [ 1465.382546] kmem_cache_alloc_noprof+0x60/0x3d0 [ 1465.382609] ? srso_return_thunk+0x5/0x5f [ 1465.382652] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 1465.382721] prepare_creds+0x2e/0x760 [ 1465.382787] ? __pfx_get_random_u64+0x10/0x10 [ 1465.382838] copy_creds+0x7a/0xa20 [ 1465.382906] ? srso_return_thunk+0x5/0x5f [ 1465.382956] copy_process+0xf37/0x70e0 [ 1465.383021] ? srso_return_thunk+0x5/0x5f [ 1465.383063] ? lock_release+0x20f/0x6f0 [ 1465.383121] ? __pfx_lock_release+0x10/0x10 [ 1465.383174] ? trace_lock_acquire+0x13b/0x1b0 [ 1465.383232] ? __pfx_copy_process+0x10/0x10 [ 1465.383305] ? srso_return_thunk+0x5/0x5f [ 1465.383347] ? _copy_from_user+0x5b/0xd0 [ 1465.383403] kernel_clone+0xeb/0x850 [ 1465.383466] ? srso_return_thunk+0x5/0x5f [ 1465.383508] ? lock_release+0x20f/0x6f0 [ 1465.383565] ? __pfx_kernel_clone+0x10/0x10 [ 1465.383650] ? srso_return_thunk+0x5/0x5f [ 1465.383692] ? srso_return_thunk+0x5/0x5f [ 1465.383743] __do_sys_clone3+0x1d9/0x260 [ 1465.383809] ? __pfx___do_sys_clone3+0x10/0x10 [ 1465.383874] ? vfs_write+0x3/0x10b0 [ 1465.383965] ? srso_return_thunk+0x5/0x5f [ 1465.384007] ? fput+0x8b/0x400 [ 1465.384049] ? srso_return_thunk+0x5/0x5f [ 1465.384091] ? ksys_write+0x1b1/0x240 [ 1465.384156] ? __pfx_ksys_write+0x10/0x10 [ 1465.384236] do_syscall_64+0xbf/0x1d0 [ 1465.384288] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.384341] RIP: 0033:0x7f0369f0ab19 [ 1465.384369] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.384409] RSP: 002b:00007f0367480188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1465.384448] RAX: ffffffffffffffda RBX: 00007f036a01df60 RCX: 00007f0369f0ab19 [ 1465.384477] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1465.384504] RBP: 00007f03674801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.384531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.384557] R13: 00007ffc32b76cef R14: 00007f0367480300 R15: 0000000000022000 [ 1465.384611] [ 1465.416567] FAULT_INJECTION: forcing a failure. [ 1465.416567] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1465.417618] CPU: 0 UID: 0 PID: 13321 Comm: syz-executor.4 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1465.417666] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.417688] Call Trace: [ 1465.417698] [ 1465.417711] dump_stack_lvl+0xfa/0x120 [ 1465.417755] should_fail_ex+0x4d7/0x5e0 [ 1465.417817] should_fail_alloc_page+0xe0/0x110 [ 1465.417891] prepare_alloc_pages+0x178/0x500 [ 1465.417938] ? srso_return_thunk+0x5/0x5f [ 1465.417988] __alloc_frozen_pages_noprof+0x180/0x1f90 [ 1465.418057] ? srso_return_thunk+0x5/0x5f [ 1465.418099] ? __mod_memcg_lruvec_state+0x4c1/0x640 [ 1465.418172] ? srso_return_thunk+0x5/0x5f [ 1465.418225] ? srso_return_thunk+0x5/0x5f [ 1465.418274] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1465.418335] ? srso_return_thunk+0x5/0x5f [ 1465.418398] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1465.418466] ? srso_return_thunk+0x5/0x5f [ 1465.418508] ? __create_object+0x59/0x80 [ 1465.418558] ? srso_return_thunk+0x5/0x5f [ 1465.418600] ? trace_kmem_cache_alloc+0x24/0xb0 [ 1465.418647] ? srso_return_thunk+0x5/0x5f [ 1465.418689] ? kmem_cache_alloc_node_noprof+0x1b3/0x3e0 [ 1465.418753] ? lock_acquire.part.0+0x2f0/0x320 [ 1465.418808] ? copy_process+0x440/0x70e0 [ 1465.418879] __alloc_pages_noprof+0xc/0x1b0 [ 1465.418939] copy_process+0x4d4/0x70e0 [ 1465.419002] ? srso_return_thunk+0x5/0x5f [ 1465.419044] ? lock_release+0x20f/0x6f0 [ 1465.419102] ? __pfx_lock_release+0x10/0x10 [ 1465.419155] ? trace_lock_acquire+0x13b/0x1b0 [ 1465.419213] ? __pfx_copy_process+0x10/0x10 [ 1465.419286] ? srso_return_thunk+0x5/0x5f [ 1465.419328] ? _copy_from_user+0x5b/0xd0 [ 1465.419383] kernel_clone+0xeb/0x850 [ 1465.419446] ? srso_return_thunk+0x5/0x5f [ 1465.419489] ? lock_release+0x20f/0x6f0 [ 1465.419545] ? __pfx_kernel_clone+0x10/0x10 [ 1465.419630] ? srso_return_thunk+0x5/0x5f [ 1465.419672] ? srso_return_thunk+0x5/0x5f [ 1465.419723] __do_sys_clone3+0x1d9/0x260 [ 1465.419790] ? __pfx___do_sys_clone3+0x10/0x10 [ 1465.419855] ? vfs_write+0x3/0x10b0 [ 1465.419944] ? srso_return_thunk+0x5/0x5f [ 1465.419987] ? fput+0x8b/0x400 [ 1465.420029] ? srso_return_thunk+0x5/0x5f [ 1465.420071] ? ksys_write+0x1b1/0x240 [ 1465.420135] ? __pfx_ksys_write+0x10/0x10 [ 1465.420216] do_syscall_64+0xbf/0x1d0 [ 1465.420267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.420319] RIP: 0033:0x7ff8d0b7eb19 [ 1465.420346] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.420387] RSP: 002b:00007ff8ce0f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1465.420425] RAX: ffffffffffffffda RBX: 00007ff8d0c91f60 RCX: 00007ff8d0b7eb19 [ 1465.420454] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1465.420481] RBP: 00007ff8ce0f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.420508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.420534] R13: 00007ffe4d70445f R14: 00007ff8ce0f4300 R15: 0000000000022000 [ 1465.420587] 18:27:32 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:27:32 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:27:32 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, 0x0) [ 1465.614973] FAULT_INJECTION: forcing a failure. [ 1465.614973] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.616123] CPU: 0 UID: 0 PID: 13328 Comm: syz-executor.4 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1465.616172] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.616195] Call Trace: [ 1465.616205] [ 1465.616219] dump_stack_lvl+0xfa/0x120 [ 1465.616273] should_fail_ex+0x4d7/0x5e0 [ 1465.616336] ? prepare_creds+0x2e/0x760 [ 1465.616405] should_failslab+0xc2/0x120 [ 1465.616476] kmem_cache_alloc_noprof+0x60/0x3d0 [ 1465.616539] ? srso_return_thunk+0x5/0x5f [ 1465.616583] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 1465.616651] prepare_creds+0x2e/0x760 [ 1465.616718] ? __pfx_get_random_u64+0x10/0x10 [ 1465.616768] copy_creds+0x7a/0xa20 [ 1465.616837] ? srso_return_thunk+0x5/0x5f [ 1465.616887] copy_process+0xf37/0x70e0 [ 1465.616951] ? srso_return_thunk+0x5/0x5f [ 1465.616994] ? lock_release+0x20f/0x6f0 [ 1465.617051] ? __pfx_lock_release+0x10/0x10 [ 1465.617105] ? trace_lock_acquire+0x13b/0x1b0 [ 1465.617163] ? __pfx_copy_process+0x10/0x10 [ 1465.617236] ? srso_return_thunk+0x5/0x5f [ 1465.617278] ? _copy_from_user+0x5b/0xd0 [ 1465.617334] kernel_clone+0xeb/0x850 [ 1465.617397] ? srso_return_thunk+0x5/0x5f [ 1465.617440] ? lock_release+0x20f/0x6f0 [ 1465.617496] ? __pfx_kernel_clone+0x10/0x10 [ 1465.617591] ? srso_return_thunk+0x5/0x5f [ 1465.617633] ? srso_return_thunk+0x5/0x5f [ 1465.617684] __do_sys_clone3+0x1d9/0x260 [ 1465.617750] ? __pfx___do_sys_clone3+0x10/0x10 [ 1465.617815] ? vfs_write+0x3/0x10b0 [ 1465.617906] ? srso_return_thunk+0x5/0x5f [ 1465.617949] ? fput+0x8b/0x400 [ 1465.617991] ? srso_return_thunk+0x5/0x5f [ 1465.618033] ? ksys_write+0x1b1/0x240 [ 1465.618098] ? __pfx_ksys_write+0x10/0x10 [ 1465.618178] do_syscall_64+0xbf/0x1d0 [ 1465.618230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.618283] RIP: 0033:0x7ff8d0b7eb19 [ 1465.618311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.618352] RSP: 002b:00007ff8ce0f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1465.618391] RAX: ffffffffffffffda RBX: 00007ff8d0c91f60 RCX: 00007ff8d0b7eb19 [ 1465.618419] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1465.618446] RBP: 00007ff8ce0f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.618473] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.618500] R13: 00007ffe4d70445f R14: 00007ff8ce0f4300 R15: 0000000000022000 [ 1465.618554] 18:27:32 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 1465.800428] FAULT_INJECTION: forcing a failure. [ 1465.800428] name failslab, interval 1, probability 0, space 0, times 0 [ 1465.801594] CPU: 0 UID: 0 PID: 13336 Comm: syz-executor.6 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1465.801648] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1465.801671] Call Trace: [ 1465.801682] [ 1465.801695] dump_stack_lvl+0xfa/0x120 [ 1465.801745] should_fail_ex+0x4d7/0x5e0 [ 1465.801807] ? security_prepare_creds+0x101/0x160 [ 1465.801876] should_failslab+0xc2/0x120 [ 1465.801947] __kmalloc_noprof+0xb5/0x4b0 [ 1465.802007] ? srso_return_thunk+0x5/0x5f [ 1465.802051] ? trace_kmem_cache_alloc+0x24/0xb0 [ 1465.802097] ? srso_return_thunk+0x5/0x5f [ 1465.802148] security_prepare_creds+0x101/0x160 [ 1465.802221] prepare_creds+0x54e/0x760 [ 1465.802293] ? __pfx_get_random_u64+0x10/0x10 [ 1465.802343] copy_creds+0x7a/0xa20 [ 1465.802412] ? srso_return_thunk+0x5/0x5f [ 1465.802462] copy_process+0xf37/0x70e0 [ 1465.802526] ? srso_return_thunk+0x5/0x5f [ 1465.802568] ? lock_release+0x20f/0x6f0 [ 1465.802627] ? __pfx_lock_release+0x10/0x10 [ 1465.802681] ? trace_lock_acquire+0x13b/0x1b0 [ 1465.802739] ? __pfx_copy_process+0x10/0x10 [ 1465.802811] ? srso_return_thunk+0x5/0x5f [ 1465.802854] ? _copy_from_user+0x5b/0xd0 [ 1465.802910] kernel_clone+0xeb/0x850 [ 1465.802973] ? srso_return_thunk+0x5/0x5f [ 1465.803015] ? lock_release+0x20f/0x6f0 [ 1465.803071] ? __pfx_kernel_clone+0x10/0x10 [ 1465.803156] ? srso_return_thunk+0x5/0x5f [ 1465.803199] ? srso_return_thunk+0x5/0x5f [ 1465.803250] __do_sys_clone3+0x1d9/0x260 [ 1465.803316] ? __pfx___do_sys_clone3+0x10/0x10 [ 1465.803380] ? vfs_write+0x3/0x10b0 [ 1465.803471] ? srso_return_thunk+0x5/0x5f [ 1465.803513] ? fput+0x8b/0x400 [ 1465.803556] ? srso_return_thunk+0x5/0x5f [ 1465.803598] ? ksys_write+0x1b1/0x240 [ 1465.803662] ? __pfx_ksys_write+0x10/0x10 [ 1465.803743] do_syscall_64+0xbf/0x1d0 [ 1465.803795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1465.803848] RIP: 0033:0x7f905ca0bb19 [ 1465.803876] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1465.803917] RSP: 002b:00007f9059f81188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1465.803955] RAX: ffffffffffffffda RBX: 00007f905cb1ef60 RCX: 00007f905ca0bb19 [ 1465.803984] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1465.804011] RBP: 00007f9059f811d0 R08: 0000000000000000 R09: 0000000000000000 [ 1465.804038] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1465.804064] R13: 00007ffdbe63ceaf R14: 00007f9059f81300 R15: 0000000000022000 [ 1465.804118] 18:28:00 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40004}, 0x0) 18:28:00 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:00 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, 0x0, 0x0) 18:28:00 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:00 executing program 3: clone3(&(0x7f0000001540)={0x177320002, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:00 executing program 5: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:00 executing program 0: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, 0x0) 18:28:00 executing program 5: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:00 executing program 6: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:00 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:00 executing program 3: clone3(&(0x7f0000001540)={0x177320004, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:00 executing program 5: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') [ 1493.928097] FAULT_INJECTION: forcing a failure. [ 1493.928097] name failslab, interval 1, probability 0, space 0, times 0 [ 1493.929122] CPU: 0 UID: 0 PID: 13380 Comm: syz-executor.7 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1493.929171] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1493.929194] Call Trace: [ 1493.929205] [ 1493.929219] dump_stack_lvl+0xfa/0x120 [ 1493.929272] should_fail_ex+0x4d7/0x5e0 [ 1493.929336] ? security_prepare_creds+0x101/0x160 [ 1493.929404] should_failslab+0xc2/0x120 [ 1493.929476] __kmalloc_noprof+0xb5/0x4b0 [ 1493.929536] ? srso_return_thunk+0x5/0x5f [ 1493.929580] ? trace_kmem_cache_alloc+0x24/0xb0 [ 1493.929627] ? srso_return_thunk+0x5/0x5f [ 1493.929678] security_prepare_creds+0x101/0x160 [ 1493.929751] prepare_creds+0x54e/0x760 [ 1493.929818] ? __pfx_get_random_u64+0x10/0x10 [ 1493.929868] copy_creds+0x7a/0xa20 [ 1493.929937] ? srso_return_thunk+0x5/0x5f [ 1493.929987] copy_process+0xf37/0x70e0 [ 1493.930051] ? srso_return_thunk+0x5/0x5f [ 1493.930094] ? lock_release+0x20f/0x6f0 [ 1493.930152] ? __pfx_lock_release+0x10/0x10 [ 1493.930206] ? trace_lock_acquire+0x13b/0x1b0 [ 1493.930264] ? __pfx_copy_process+0x10/0x10 [ 1493.930337] ? srso_return_thunk+0x5/0x5f [ 1493.930379] ? _copy_from_user+0x5b/0xd0 [ 1493.930435] kernel_clone+0xeb/0x850 [ 1493.930498] ? srso_return_thunk+0x5/0x5f [ 1493.930540] ? lock_release+0x20f/0x6f0 [ 1493.930605] ? __pfx_kernel_clone+0x10/0x10 [ 1493.930690] ? srso_return_thunk+0x5/0x5f [ 1493.930733] ? srso_return_thunk+0x5/0x5f [ 1493.930784] __do_sys_clone3+0x1d9/0x260 [ 1493.930850] ? __pfx___do_sys_clone3+0x10/0x10 [ 1493.930915] ? vfs_write+0x3/0x10b0 [ 1493.931005] ? srso_return_thunk+0x5/0x5f [ 1493.931048] ? fput+0x8b/0x400 [ 1493.931090] ? srso_return_thunk+0x5/0x5f [ 1493.931133] ? ksys_write+0x1b1/0x240 [ 1493.931197] ? __pfx_ksys_write+0x10/0x10 [ 1493.931277] do_syscall_64+0xbf/0x1d0 [ 1493.931329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1493.931382] RIP: 0033:0x7f0369f0ab19 [ 1493.931410] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1493.931451] RSP: 002b:00007f0367480188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1493.931489] RAX: ffffffffffffffda RBX: 00007f036a01df60 RCX: 00007f0369f0ab19 [ 1493.931518] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1493.931545] RBP: 00007f03674801d0 R08: 0000000000000000 R09: 0000000000000000 [ 1493.931572] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1493.931598] R13: 00007ffc32b76cef R14: 00007f0367480300 R15: 0000000000022000 [ 1493.931651] 18:28:00 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) 18:28:27 executing program 5: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:27 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:27 executing program 3: clone3(&(0x7f0000001540)={0x177323502, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:27 executing program 0: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:28:27 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 7) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:27 executing program 6: clone3(&(0x7f0000001540)={0x177320002, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:27 executing program 2: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, 0x0) 18:28:27 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 1) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:27 executing program 6: clone3(&(0x7f0000001540)={0x177320004, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 1521.127041] FAULT_INJECTION: forcing a failure. [ 1521.127041] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.129269] CPU: 1 UID: 0 PID: 13410 Comm: syz-executor.4 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1521.129376] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1521.129424] Call Trace: [ 1521.129447] [ 1521.129476] dump_stack_lvl+0xfa/0x120 [ 1521.129577] should_fail_ex+0x4d7/0x5e0 [ 1521.129711] ? security_prepare_creds+0x101/0x160 [ 1521.129858] should_failslab+0xc2/0x120 [ 1521.130012] __kmalloc_noprof+0xb5/0x4b0 [ 1521.130141] ? srso_return_thunk+0x5/0x5f [ 1521.130235] ? trace_kmem_cache_alloc+0x24/0xb0 [ 1521.130336] ? srso_return_thunk+0x5/0x5f [ 1521.130447] security_prepare_creds+0x101/0x160 [ 1521.130607] prepare_creds+0x54e/0x760 [ 1521.130754] ? __pfx_get_random_u64+0x10/0x10 [ 1521.130861] copy_creds+0x7a/0xa20 [ 1521.131011] ? srso_return_thunk+0x5/0x5f [ 1521.131119] copy_process+0xf37/0x70e0 [ 1521.131258] ? srso_return_thunk+0x5/0x5f [ 1521.131351] ? lock_release+0x20f/0x6f0 [ 1521.131477] ? __pfx_lock_release+0x10/0x10 [ 1521.131607] ? trace_lock_acquire+0x13b/0x1b0 [ 1521.131733] ? __pfx_copy_process+0x10/0x10 [ 1521.131892] ? srso_return_thunk+0x5/0x5f [ 1521.131984] ? _copy_from_user+0x5b/0xd0 [ 1521.132105] kernel_clone+0xeb/0x850 [ 1521.132242] ? srso_return_thunk+0x5/0x5f [ 1521.132335] ? lock_release+0x20f/0x6f0 [ 1521.132458] ? __pfx_kernel_clone+0x10/0x10 [ 1521.132644] ? srso_return_thunk+0x5/0x5f [ 1521.132736] ? srso_return_thunk+0x5/0x5f [ 1521.132848] __do_sys_clone3+0x1d9/0x260 [ 1521.132992] ? __pfx___do_sys_clone3+0x10/0x10 [ 1521.133134] ? vfs_write+0x3/0x10b0 [ 1521.133331] ? srso_return_thunk+0x5/0x5f [ 1521.133423] ? fput+0x8b/0x400 [ 1521.133515] ? srso_return_thunk+0x5/0x5f [ 1521.133607] ? ksys_write+0x1b1/0x240 [ 1521.133747] ? __pfx_ksys_write+0x10/0x10 [ 1521.133924] do_syscall_64+0xbf/0x1d0 [ 1521.134035] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.134148] RIP: 0033:0x7ff8d0b7eb19 [ 1521.134209] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1521.134297] RSP: 002b:00007ff8ce0f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1521.134381] RAX: ffffffffffffffda RBX: 00007ff8d0c91f60 RCX: 00007ff8d0b7eb19 [ 1521.134444] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1521.134502] RBP: 00007ff8ce0f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.134561] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.134619] R13: 00007ffe4d70445f R14: 00007ff8ce0f4300 R15: 0000000000022000 [ 1521.134736] 18:28:27 executing program 5: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') [ 1521.232042] FAULT_INJECTION: forcing a failure. [ 1521.232042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.234371] CPU: 1 UID: 0 PID: 13423 Comm: syz-executor.1 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1521.234475] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1521.234522] Call Trace: [ 1521.234544] [ 1521.234572] dump_stack_lvl+0xfa/0x120 [ 1521.234671] should_fail_ex+0x4d7/0x5e0 [ 1521.234802] _copy_from_user+0x30/0xd0 [ 1521.234906] copy_clone_args_from_user+0x147/0x780 [ 1521.235038] ? ksys_write+0x122/0x240 [ 1521.235172] ? srso_return_thunk+0x5/0x5f [ 1521.235271] ? lock_release+0x20f/0x6f0 [ 1521.235391] ? __pfx_copy_clone_args_from_user+0x10/0x10 [ 1521.235532] ? ksys_write+0x188/0x240 [ 1521.235665] ? srso_return_thunk+0x5/0x5f [ 1521.235755] ? lock_release+0x20f/0x6f0 [ 1521.235877] ? __pfx_lock_release+0x10/0x10 [ 1521.235990] ? lock_is_held_type+0x9e/0x120 [ 1521.236086] ? srso_return_thunk+0x5/0x5f [ 1521.236176] ? srso_return_thunk+0x5/0x5f [ 1521.236284] __do_sys_clone3+0x91/0x260 [ 1521.236425] ? __pfx___do_sys_clone3+0x10/0x10 [ 1521.236560] ? vfs_write+0x3/0x10b0 [ 1521.236696] ? lock_acquire+0x32/0xc0 [ 1521.236811] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1521.236914] ? srso_return_thunk+0x5/0x5f [ 1521.237003] ? __fget_files+0x206/0x3b0 [ 1521.237150] ? srso_return_thunk+0x5/0x5f [ 1521.237238] ? fput+0x8b/0x400 [ 1521.237326] ? srso_return_thunk+0x5/0x5f [ 1521.237415] ? ksys_write+0x1b1/0x240 [ 1521.237550] ? __pfx_ksys_write+0x10/0x10 [ 1521.237719] do_syscall_64+0xbf/0x1d0 [ 1521.237826] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.237935] RIP: 0033:0x7f75517b2b19 [ 1521.237992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1521.238077] RSP: 002b:00007f754ed28188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1521.238158] RAX: ffffffffffffffda RBX: 00007f75518c5f60 RCX: 00007f75517b2b19 [ 1521.238218] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1521.238274] RBP: 00007f754ed281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.238330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.238386] R13: 00007fffa2af410f R14: 00007f754ed28300 R15: 0000000000022000 [ 1521.238498] 18:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 1) [ 1521.359743] FAULT_INJECTION: forcing a failure. [ 1521.359743] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1521.361791] CPU: 1 UID: 0 PID: 13427 Comm: syz-executor.2 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1521.361883] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1521.361925] Call Trace: [ 1521.361944] [ 1521.361970] dump_stack_lvl+0xfa/0x120 [ 1521.362059] should_fail_ex+0x4d7/0x5e0 [ 1521.362178] _copy_from_user+0x30/0xd0 [ 1521.362281] copy_msghdr_from_user+0x89/0x150 [ 1521.362418] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1521.362585] ? __pfx_lock_release+0x10/0x10 [ 1521.362702] ___sys_sendmsg+0xdd/0x1b0 [ 1521.362838] ? __pfx____sys_sendmsg+0x10/0x10 [ 1521.362978] ? srso_return_thunk+0x5/0x5f [ 1521.363059] ? find_held_lock+0x2c/0x110 [ 1521.363135] ? __fget_files+0x1fc/0x3b0 [ 1521.363245] ? srso_return_thunk+0x5/0x5f [ 1521.363325] ? lock_release+0x20f/0x6f0 [ 1521.363434] ? __pfx_lock_release+0x10/0x10 [ 1521.363549] ? trace_lock_acquire+0x13b/0x1b0 [ 1521.363644] ? srso_return_thunk+0x5/0x5f [ 1521.363724] ? lock_acquire+0x32/0xc0 [ 1521.363823] ? __fget_files+0x34/0x3b0 [ 1521.363946] ? srso_return_thunk+0x5/0x5f [ 1521.364025] ? __fget_files+0x206/0x3b0 [ 1521.364170] __sys_sendmsg+0x151/0x200 [ 1521.364242] ? __pfx___sys_sendmsg+0x10/0x10 [ 1521.364327] ? srso_return_thunk+0x5/0x5f [ 1521.364406] ? fput+0x8b/0x400 [ 1521.364484] ? srso_return_thunk+0x5/0x5f [ 1521.364564] ? ksys_write+0x1b1/0x240 [ 1521.364685] ? __pfx_ksys_write+0x10/0x10 [ 1521.364810] ? trace_x86_fpu_regs_activated+0x130/0x190 [ 1521.364943] do_syscall_64+0xbf/0x1d0 [ 1521.365038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.365135] RIP: 0033:0x7f41b1fbcb19 [ 1521.365187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1521.365263] RSP: 002b:00007f41af532188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1521.365334] RAX: ffffffffffffffda RBX: 00007f41b20cff60 RCX: 00007f41b1fbcb19 [ 1521.365388] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1521.365437] RBP: 00007f41af5321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.365488] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.365537] R13: 00007ffefec949af R14: 00007f41af532300 R15: 0000000000022000 [ 1521.365637] 18:28:28 executing program 3: clone3(&(0x7f0000001540)={0x177323503, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:28 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 8) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) [ 1521.513737] FAULT_INJECTION: forcing a failure. [ 1521.513737] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.515305] CPU: 0 UID: 0 PID: 13435 Comm: syz-executor.1 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1521.515355] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1521.515377] Call Trace: [ 1521.515388] [ 1521.515402] dump_stack_lvl+0xfa/0x120 [ 1521.515452] should_fail_ex+0x4d7/0x5e0 [ 1521.515525] should_failslab+0xc2/0x120 [ 1521.515596] kmem_cache_alloc_node_noprof+0x72/0x3e0 [ 1521.515661] ? lock_acquire+0x32/0xc0 [ 1521.515715] ? copy_process+0x440/0x70e0 [ 1521.515782] ? srso_return_thunk+0x5/0x5f [ 1521.515833] copy_process+0x440/0x70e0 [ 1521.515896] ? srso_return_thunk+0x5/0x5f [ 1521.515939] ? lock_release+0x20f/0x6f0 [ 1521.515996] ? __pfx_lock_release+0x10/0x10 [ 1521.516050] ? trace_lock_acquire+0x13b/0x1b0 [ 1521.516108] ? __pfx_copy_process+0x10/0x10 [ 1521.516180] ? srso_return_thunk+0x5/0x5f [ 1521.516223] ? _copy_from_user+0x5b/0xd0 [ 1521.516283] kernel_clone+0xeb/0x850 [ 1521.516346] ? srso_return_thunk+0x5/0x5f [ 1521.516388] ? lock_release+0x20f/0x6f0 [ 1521.516444] ? __pfx_kernel_clone+0x10/0x10 [ 1521.516529] ? srso_return_thunk+0x5/0x5f [ 1521.516572] ? srso_return_thunk+0x5/0x5f [ 1521.516623] __do_sys_clone3+0x1d9/0x260 [ 1521.516689] ? __pfx___do_sys_clone3+0x10/0x10 [ 1521.516754] ? vfs_write+0x3/0x10b0 [ 1521.516844] ? srso_return_thunk+0x5/0x5f [ 1521.516886] ? fput+0x8b/0x400 [ 1521.516928] ? srso_return_thunk+0x5/0x5f [ 1521.516971] ? ksys_write+0x1b1/0x240 [ 1521.517035] ? __pfx_ksys_write+0x10/0x10 [ 1521.517115] do_syscall_64+0xbf/0x1d0 [ 1521.517167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.517220] RIP: 0033:0x7f75517b2b19 [ 1521.517248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1521.517289] RSP: 002b:00007f754ed28188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1521.517328] RAX: ffffffffffffffda RBX: 00007f75518c5f60 RCX: 00007f75517b2b19 [ 1521.517357] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1521.517383] RBP: 00007f754ed281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.517410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.517437] R13: 00007fffa2af410f R14: 00007f754ed28300 R15: 0000000000022000 [ 1521.517490] 18:28:28 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 2) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:28 executing program 3: clone3(&(0x7f0000001540)={0x177323504, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:28 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 3) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:28 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 2) [ 1521.819119] FAULT_INJECTION: forcing a failure. [ 1521.819119] name failslab, interval 1, probability 0, space 0, times 0 [ 1521.820958] CPU: 0 UID: 0 PID: 13451 Comm: syz-executor.2 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1521.821008] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1521.821031] Call Trace: [ 1521.821041] [ 1521.821055] dump_stack_lvl+0xfa/0x120 [ 1521.821104] should_fail_ex+0x4d7/0x5e0 [ 1521.821168] should_failslab+0xc2/0x120 [ 1521.821239] kmem_cache_alloc_node_noprof+0x72/0x3e0 [ 1521.821310] ? __alloc_skb+0x2ad/0x370 [ 1521.821384] __alloc_skb+0x2ad/0x370 [ 1521.821450] ? __pfx___alloc_skb+0x10/0x10 [ 1521.821523] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1521.821595] netlink_alloc_large_skb+0x69/0x150 [ 1521.821660] netlink_sendmsg+0x678/0xd80 [ 1521.821729] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1521.821788] ? __import_iovec+0x1c7/0x4f0 [ 1521.821856] ____sys_sendmsg+0xac5/0xc80 [ 1521.821911] ? copy_msghdr_from_user+0xfc/0x150 [ 1521.821983] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1521.822054] ? __pfx_lock_release+0x10/0x10 [ 1521.822117] ___sys_sendmsg+0x110/0x1b0 [ 1521.822189] ? __pfx____sys_sendmsg+0x10/0x10 [ 1521.822271] ? __fget_files+0x1fc/0x3b0 [ 1521.822331] ? srso_return_thunk+0x5/0x5f [ 1521.822374] ? lock_release+0x20f/0x6f0 [ 1521.822431] ? __pfx_lock_release+0x10/0x10 [ 1521.822485] ? trace_lock_acquire+0x13b/0x1b0 [ 1521.822539] ? srso_return_thunk+0x5/0x5f [ 1521.822583] ? lock_acquire+0x32/0xc0 [ 1521.822636] ? __fget_files+0x34/0x3b0 [ 1521.822702] ? srso_return_thunk+0x5/0x5f [ 1521.822744] ? __fget_files+0x206/0x3b0 [ 1521.822821] __sys_sendmsg+0x151/0x200 [ 1521.822860] ? __pfx___sys_sendmsg+0x10/0x10 [ 1521.822915] ? __pfx_ksys_write+0x10/0x10 [ 1521.822997] do_syscall_64+0xbf/0x1d0 [ 1521.823048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1521.823101] RIP: 0033:0x7f41b1fbcb19 [ 1521.823129] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1521.823169] RSP: 002b:00007f41af511188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1521.823208] RAX: ffffffffffffffda RBX: 00007f41b20d0020 RCX: 00007f41b1fbcb19 [ 1521.823237] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1521.823263] RBP: 00007f41af5111d0 R08: 0000000000000000 R09: 0000000000000000 [ 1521.823290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1521.823317] R13: 00007ffefec949af R14: 00007f41af511300 R15: 0000000000022000 [ 1521.823370] 18:28:52 executing program 3: clone3(&(0x7f0000001540)={0x177323505, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:52 executing program 6: clone3(&(0x7f0000001540)={0x177323502, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:52 executing program 0: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:28:52 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 9) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:52 executing program 5: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 3) 18:28:52 executing program 7: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:52 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 4) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 1545.523689] FAULT_INJECTION: forcing a failure. [ 1545.523689] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1545.524741] CPU: 0 UID: 0 PID: 13466 Comm: syz-executor.1 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1545.524790] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1545.524813] Call Trace: [ 1545.524824] [ 1545.524838] dump_stack_lvl+0xfa/0x120 [ 1545.524888] should_fail_ex+0x4d7/0x5e0 [ 1545.524953] should_fail_alloc_page+0xe0/0x110 [ 1545.525029] prepare_alloc_pages+0x178/0x500 [ 1545.525078] ? srso_return_thunk+0x5/0x5f [ 1545.525129] __alloc_frozen_pages_noprof+0x180/0x1f90 [ 1545.525198] ? srso_return_thunk+0x5/0x5f [ 1545.525240] ? __mod_memcg_lruvec_state+0x4c1/0x640 [ 1545.525317] ? srso_return_thunk+0x5/0x5f [ 1545.525371] ? srso_return_thunk+0x5/0x5f [ 1545.525416] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1545.525477] ? srso_return_thunk+0x5/0x5f [ 1545.525540] ? _raw_spin_unlock_irqrestore+0x2c/0x50 [ 1545.525607] ? srso_return_thunk+0x5/0x5f [ 1545.525649] ? __create_object+0x59/0x80 [ 1545.525700] ? srso_return_thunk+0x5/0x5f [ 1545.525742] ? trace_kmem_cache_alloc+0x24/0xb0 [ 1545.525789] ? srso_return_thunk+0x5/0x5f [ 1545.525832] ? kmem_cache_alloc_node_noprof+0x1b3/0x3e0 [ 1545.525896] ? lock_acquire+0x32/0xc0 [ 1545.525950] ? copy_process+0x440/0x70e0 [ 1545.526022] __alloc_pages_noprof+0xc/0x1b0 [ 1545.526082] copy_process+0x4d4/0x70e0 [ 1545.526145] ? srso_return_thunk+0x5/0x5f [ 1545.526188] ? lock_release+0x20f/0x6f0 [ 1545.526245] ? __pfx_lock_release+0x10/0x10 [ 1545.526299] ? trace_lock_acquire+0x13b/0x1b0 [ 1545.526357] ? __pfx_copy_process+0x10/0x10 [ 1545.526430] ? srso_return_thunk+0x5/0x5f [ 1545.526472] ? _copy_from_user+0x5b/0xd0 [ 1545.526529] kernel_clone+0xeb/0x850 [ 1545.526592] ? srso_return_thunk+0x5/0x5f [ 1545.526634] ? lock_release+0x20f/0x6f0 [ 1545.526690] ? __pfx_kernel_clone+0x10/0x10 [ 1545.526776] ? srso_return_thunk+0x5/0x5f [ 1545.526818] ? srso_return_thunk+0x5/0x5f [ 1545.526869] __do_sys_clone3+0x1d9/0x260 [ 1545.526935] ? __pfx___do_sys_clone3+0x10/0x10 [ 1545.527000] ? vfs_write+0x3/0x10b0 [ 1545.527091] ? srso_return_thunk+0x5/0x5f [ 1545.527133] ? fput+0x8b/0x400 [ 1545.527176] ? srso_return_thunk+0x5/0x5f [ 1545.527218] ? ksys_write+0x1b1/0x240 [ 1545.527282] ? __pfx_ksys_write+0x10/0x10 [ 1545.527363] do_syscall_64+0xbf/0x1d0 [ 1545.527415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.527468] RIP: 0033:0x7f75517b2b19 [ 1545.527497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1545.527538] RSP: 002b:00007f754ed28188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1545.527576] RAX: ffffffffffffffda RBX: 00007f75518c5f60 RCX: 00007f75517b2b19 [ 1545.527605] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1545.527632] RBP: 00007f754ed281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1545.527660] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.527686] R13: 00007fffa2af410f R14: 00007f754ed28300 R15: 0000000000022000 [ 1545.527740] [ 1545.635153] FAULT_INJECTION: forcing a failure. [ 1545.635153] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.636139] CPU: 0 UID: 0 PID: 13478 Comm: syz-executor.4 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1545.636187] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1545.636209] Call Trace: [ 1545.636219] [ 1545.636233] dump_stack_lvl+0xfa/0x120 [ 1545.636284] should_fail_ex+0x4d7/0x5e0 [ 1545.636351] ? create_user_ns+0x1dc/0xdd0 [ 1545.636407] should_failslab+0xc2/0x120 [ 1545.636478] kmem_cache_alloc_noprof+0x60/0x3d0 [ 1545.636552] create_user_ns+0x1dc/0xdd0 [ 1545.636612] ? srso_return_thunk+0x5/0x5f [ 1545.636654] ? prepare_creds+0x562/0x760 [ 1545.636730] copy_creds+0x497/0xa20 [ 1545.636799] ? srso_return_thunk+0x5/0x5f [ 1545.636849] copy_process+0xf37/0x70e0 [ 1545.636912] ? srso_return_thunk+0x5/0x5f [ 1545.636955] ? lock_release+0x20f/0x6f0 [ 1545.637013] ? __pfx_lock_release+0x10/0x10 [ 1545.637067] ? trace_lock_acquire+0x13b/0x1b0 [ 1545.637124] ? __pfx_copy_process+0x10/0x10 [ 1545.637197] ? srso_return_thunk+0x5/0x5f [ 1545.637239] ? _copy_from_user+0x5b/0xd0 [ 1545.637294] kernel_clone+0xeb/0x850 [ 1545.637357] ? srso_return_thunk+0x5/0x5f [ 1545.637400] ? lock_release+0x20f/0x6f0 [ 1545.637456] ? __pfx_kernel_clone+0x10/0x10 [ 1545.637541] ? srso_return_thunk+0x5/0x5f [ 1545.637583] ? srso_return_thunk+0x5/0x5f [ 1545.637634] __do_sys_clone3+0x1d9/0x260 [ 1545.637700] ? __pfx___do_sys_clone3+0x10/0x10 [ 1545.637765] ? vfs_write+0x3/0x10b0 [ 1545.637855] ? srso_return_thunk+0x5/0x5f [ 1545.637897] ? fput+0x8b/0x400 [ 1545.637940] ? srso_return_thunk+0x5/0x5f [ 1545.637985] ? ksys_write+0x1b1/0x240 [ 1545.638051] ? __pfx_ksys_write+0x10/0x10 [ 1545.638132] do_syscall_64+0xbf/0x1d0 [ 1545.638183] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.638235] RIP: 0033:0x7ff8d0b7eb19 [ 1545.638263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1545.638305] RSP: 002b:00007ff8ce0f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1545.638343] RAX: ffffffffffffffda RBX: 00007ff8d0c91f60 RCX: 00007ff8d0b7eb19 [ 1545.638372] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1545.638399] RBP: 00007ff8ce0f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1545.638426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.638453] R13: 00007ffe4d70445f R14: 00007ff8ce0f4300 R15: 0000000000022000 [ 1545.638506] 18:28:52 executing program 3: clone3(&(0x7f0000001540)={0x177323506, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:52 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 4) 18:28:52 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 5) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:28:52 executing program 0: clone3(0x0, 0x0) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:28:52 executing program 5: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:52 executing program 6: clone3(&(0x7f0000001540)={0x177323503, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 1545.842723] FAULT_INJECTION: forcing a failure. [ 1545.842723] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.843722] CPU: 0 UID: 0 PID: 13489 Comm: syz-executor.1 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1545.843771] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1545.843793] Call Trace: [ 1545.843804] [ 1545.843818] dump_stack_lvl+0xfa/0x120 [ 1545.843868] should_fail_ex+0x4d7/0x5e0 [ 1545.843931] ? prepare_creds+0x2e/0x760 [ 1545.843999] should_failslab+0xc2/0x120 [ 1545.844071] kmem_cache_alloc_noprof+0x60/0x3d0 [ 1545.844134] ? srso_return_thunk+0x5/0x5f [ 1545.844178] ? lockdep_hardirqs_on_prepare+0x262/0x3f0 [ 1545.844246] prepare_creds+0x2e/0x760 [ 1545.844317] ? __pfx_get_random_u64+0x10/0x10 [ 1545.844392] copy_creds+0x7a/0xa20 [ 1545.844461] ? srso_return_thunk+0x5/0x5f [ 1545.844511] copy_process+0xf37/0x70e0 [ 1545.844576] ? srso_return_thunk+0x5/0x5f [ 1545.844618] ? lock_release+0x20f/0x6f0 [ 1545.844675] ? __pfx_lock_release+0x10/0x10 [ 1545.844729] ? trace_lock_acquire+0x13b/0x1b0 [ 1545.844787] ? __pfx_copy_process+0x10/0x10 [ 1545.844860] ? srso_return_thunk+0x5/0x5f [ 1545.844903] ? _copy_from_user+0x5b/0xd0 [ 1545.844958] kernel_clone+0xeb/0x850 [ 1545.845021] ? srso_return_thunk+0x5/0x5f [ 1545.845064] ? lock_release+0x20f/0x6f0 [ 1545.845120] ? __pfx_kernel_clone+0x10/0x10 [ 1545.845205] ? srso_return_thunk+0x5/0x5f [ 1545.845247] ? srso_return_thunk+0x5/0x5f [ 1545.845298] __do_sys_clone3+0x1d9/0x260 [ 1545.845365] ? __pfx___do_sys_clone3+0x10/0x10 [ 1545.845430] ? vfs_write+0x3/0x10b0 [ 1545.845520] ? srso_return_thunk+0x5/0x5f [ 1545.845563] ? fput+0x8b/0x400 [ 1545.845605] ? srso_return_thunk+0x5/0x5f [ 1545.845647] ? ksys_write+0x1b1/0x240 [ 1545.845711] ? __pfx_ksys_write+0x10/0x10 [ 1545.845792] do_syscall_64+0xbf/0x1d0 [ 1545.845843] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.845897] RIP: 0033:0x7f75517b2b19 [ 1545.845925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1545.845966] RSP: 002b:00007f754ed28188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1545.846004] RAX: ffffffffffffffda RBX: 00007f75518c5f60 RCX: 00007f75517b2b19 [ 1545.846033] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1545.846060] RBP: 00007f754ed281d0 R08: 0000000000000000 R09: 0000000000000000 [ 1545.846087] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.846113] R13: 00007fffa2af410f R14: 00007f754ed28300 R15: 0000000000022000 [ 1545.846167] 18:28:52 executing program 0: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:28:52 executing program 5: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:28:52 executing program 3: clone3(&(0x7f0000001540)={0x177323507, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:12 executing program 6: clone3(&(0x7f0000001540)={0x177323504, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:12 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 6) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:12 executing program 7: clone3(&(0x7f0000001540)={0x177320002, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:12 executing program 0: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:12 executing program 5: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:12 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 10) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:12 executing program 3: clone3(&(0x7f0000001540)={0x177323508, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 5) 18:29:12 executing program 6: clone3(&(0x7f0000001540)={0x177323505, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:12 executing program 3: clone3(&(0x7f0000001540)={0x17732350a, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:12 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:12 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 6) [ 1565.866529] cgroup: fork rejected by pids controller in /syz0 18:29:12 executing program 3: clone3(&(0x7f0000001540)={0x17732350c, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:12 executing program 7: clone3(&(0x7f0000001540)={0x177320004, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:12 executing program 6: clone3(&(0x7f0000001540)={0x177323506, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:12 executing program 3: clone3(&(0x7f0000001540)={0x17732350d, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') [ 1566.103929] FAULT_INJECTION: forcing a failure. [ 1566.103929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1566.105835] CPU: 1 UID: 0 PID: 13636 Comm: syz-executor.2 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1566.105925] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1566.105966] Call Trace: [ 1566.105985] [ 1566.106011] dump_stack_lvl+0xfa/0x120 [ 1566.106097] should_fail_ex+0x4d7/0x5e0 [ 1566.106214] _copy_from_iter+0x1dd/0x15c0 [ 1566.106311] ? __pfx_lock_release+0x10/0x10 [ 1566.106411] ? trace_lock_acquire+0x13b/0x1b0 [ 1566.106507] ? __pfx__copy_from_iter+0x10/0x10 [ 1566.106591] ? __virt_addr_valid+0x1c6/0x5d0 [ 1566.106719] ? srso_return_thunk+0x5/0x5f [ 1566.106798] ? __virt_addr_valid+0x100/0x5d0 [ 1566.106913] ? srso_return_thunk+0x5/0x5f [ 1566.106992] ? __check_object_size+0x53c/0x880 [ 1566.107115] netlink_sendmsg+0x7ff/0xd80 [ 1566.107246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1566.107355] ? __import_iovec+0x1c7/0x4f0 [ 1566.107481] ____sys_sendmsg+0xac5/0xc80 [ 1566.107583] ? copy_msghdr_from_user+0xfc/0x150 [ 1566.107717] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1566.107848] ? __pfx_lock_release+0x10/0x10 [ 1566.107964] ___sys_sendmsg+0x110/0x1b0 [ 1566.108099] ? __pfx____sys_sendmsg+0x10/0x10 [ 1566.108250] ? __fget_files+0x1fc/0x3b0 [ 1566.108360] ? srso_return_thunk+0x5/0x5f [ 1566.108439] ? lock_release+0x20f/0x6f0 [ 1566.108546] ? __pfx_lock_release+0x10/0x10 [ 1566.108646] ? trace_lock_acquire+0x13b/0x1b0 [ 1566.108739] ? srso_return_thunk+0x5/0x5f [ 1566.108818] ? lock_acquire+0x32/0xc0 [ 1566.108916] ? __fget_files+0x34/0x3b0 [ 1566.109039] ? srso_return_thunk+0x5/0x5f [ 1566.109128] ? __fget_files+0x206/0x3b0 [ 1566.109272] __sys_sendmsg+0x151/0x200 [ 1566.109344] ? __pfx___sys_sendmsg+0x10/0x10 [ 1566.109448] ? __pfx_ksys_write+0x10/0x10 [ 1566.109569] ? trace_x86_fpu_regs_activated+0x130/0x190 [ 1566.109702] do_syscall_64+0xbf/0x1d0 [ 1566.109797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.109894] RIP: 0033:0x7f41b1fbcb19 [ 1566.109945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1566.110021] RSP: 002b:00007f41af532188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1566.110093] RAX: ffffffffffffffda RBX: 00007f41b20cff60 RCX: 00007f41b1fbcb19 [ 1566.110146] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1566.110196] RBP: 00007f41af5321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1566.110246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1566.110295] R13: 00007ffefec949af R14: 00007f41af532300 R15: 0000000000022000 [ 1566.110394] 18:29:12 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:12 executing program 6: clone3(&(0x7f0000001540)={0x177323507, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:13 executing program 0: clone3(&(0x7f0000001540)={0x0, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:13 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1800000013000100a8012fe6cbff93da32deaa830a3d0000d8c93100"], 0x18}], 0x1}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, &(0x7f0000000440)={0x2, &(0x7f0000000400)=[{0x58, 0xf2, &(0x7f0000000280)="38896b5ff85cba0ed1cf6057f54d3cd81f8d84f8206b38bc34a46109f8a25ed81e81179c5db85cecde441710a9f5932455f3073ee9f26caf76e5bee22de6a78b209e873b194bff4067f7201034d4a4a1fb51c3faa590c281ebcce205309a561d826ef3d91072ef5fd84254007b25452be4731b2717dd4d4fc219e3f23b718fee6a147b46e7855c6662021a00c04d22ea3b9164c5999af145397c66434fbb3ef55ef2e80d97f4cd75fa173d9b20bce71f0566d63b058b243ce2693414c5d6b79a5af3d678071b32c2fddfdb3d01526b5f7354de65e3e4480a83730d061dcb21c051b52dfb990962ec9d80382812f6327f89a2"}, {0x3ff, 0x52, &(0x7f0000000380)="50ac0bd76db549a2a6705b112122c9aa002700040eeeb2e2fcf7168d8962eafbd1a24e01bdccafe885574e929d95bd6147564bab44813bb8824c6466fb79bee9ab65b8cbe1092d7da16f9b4d7238ba215e24"}]}) getsockopt$netlink(r0, 0x10e, 0x1, &(0x7f0000000100)=""/144, &(0x7f0000000000)=0x90) clone3(&(0x7f00000001c0)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:13 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 11) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:13 executing program 7: clone3(&(0x7f0000001540)={0x177323502, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:13 executing program 3: clone3(&(0x7f0000001540)={0x17732350e, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:13 executing program 6: clone3(&(0x7f0000001540)={0x177323508, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) [ 1566.627807] FAULT_INJECTION: forcing a failure. [ 1566.627807] name failslab, interval 1, probability 0, space 0, times 0 [ 1566.630138] CPU: 1 UID: 0 PID: 13682 Comm: syz-executor.4 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1566.630238] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1566.630290] Call Trace: [ 1566.630311] [ 1566.630338] dump_stack_lvl+0xfa/0x120 [ 1566.630432] should_fail_ex+0x4d7/0x5e0 [ 1566.630558] should_failslab+0xc2/0x120 [ 1566.630700] __kmalloc_node_track_caller_noprof+0xb9/0x490 [ 1566.630833] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1566.630925] ? setup_userns_sysctls+0x51/0x190 [ 1566.631062] kmemdup_noprof+0x2b/0x60 [ 1566.631145] setup_userns_sysctls+0x51/0x190 [ 1566.631278] create_user_ns+0x96a/0xdd0 [ 1566.631419] copy_creds+0x497/0xa20 [ 1566.631559] ? srso_return_thunk+0x5/0x5f [ 1566.631660] copy_process+0xf37/0x70e0 [ 1566.631789] ? srso_return_thunk+0x5/0x5f [ 1566.631875] ? lock_release+0x20f/0x6f0 [ 1566.631992] ? __pfx_lock_release+0x10/0x10 [ 1566.632101] ? trace_lock_acquire+0x13b/0x1b0 [ 1566.632218] ? __pfx_copy_process+0x10/0x10 [ 1566.632365] ? srso_return_thunk+0x5/0x5f [ 1566.632451] ? _copy_from_user+0x5b/0xd0 [ 1566.632563] kernel_clone+0xeb/0x850 [ 1566.632691] ? srso_return_thunk+0x5/0x5f [ 1566.632777] ? lock_release+0x20f/0x6f0 [ 1566.632891] ? __pfx_kernel_clone+0x10/0x10 [ 1566.633076] ? srso_return_thunk+0x5/0x5f [ 1566.633163] ? srso_return_thunk+0x5/0x5f [ 1566.633266] __do_sys_clone3+0x1d9/0x260 [ 1566.633400] ? __pfx___do_sys_clone3+0x10/0x10 [ 1566.633532] ? vfs_write+0x3/0x10b0 [ 1566.633715] ? srso_return_thunk+0x5/0x5f [ 1566.633801] ? fput+0x8b/0x400 [ 1566.633886] ? srso_return_thunk+0x5/0x5f [ 1566.633972] ? ksys_write+0x1b1/0x240 [ 1566.634102] ? __pfx_ksys_write+0x10/0x10 [ 1566.634266] do_syscall_64+0xbf/0x1d0 [ 1566.634369] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1566.634474] RIP: 0033:0x7ff8d0b7eb19 [ 1566.634531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1566.634614] RSP: 002b:00007ff8ce0f4188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1566.634697] RAX: ffffffffffffffda RBX: 00007ff8d0c91f60 RCX: 00007ff8d0b7eb19 [ 1566.634755] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1566.634810] RBP: 00007ff8ce0f41d0 R08: 0000000000000000 R09: 0000000000000000 [ 1566.634864] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1566.634918] R13: 00007ffe4d70445f R14: 00007ff8ce0f4300 R15: 0000000000022000 [ 1566.635028] 18:29:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 7) 18:29:35 executing program 6: clone3(&(0x7f0000001540)={0x177323509, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:35 executing program 0: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:35 executing program 4: r0 = perf_event_open(&(0x7f0000000080)={0x2, 0x80, 0x81, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xc, 0xffffffffffffffff, 0x0) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) (fail_nth: 12) close(r0) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:35 executing program 1: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2, 0x2, 0x1, 0x3}, {0x400, 0x5, 0x80, 0x5}, {0x400, 0x2, 0xd0, 0x20}, {0x8, 0x2, 0x8, 0x101}, {0x1, 0x8, 0x3, 0x62}]}, 0x10) read$hiddev(0xffffffffffffffff, &(0x7f0000000100)=""/192, 0xffffffffffffff58) 18:29:35 executing program 5: clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:35 executing program 7: clone3(&(0x7f0000001540)={0x177323503, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:35 executing program 3: clone3(&(0x7f0000001540)={0x17732350f, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:35 executing program 6: clone3(&(0x7f0000001540)={0x17732350a, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:35 executing program 3: clone3(&(0x7f0000001540)={0x177323510, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') [ 1588.743202] FAULT_INJECTION: forcing a failure. [ 1588.743202] name failslab, interval 1, probability 0, space 0, times 0 [ 1588.746017] CPU: 1 UID: 0 PID: 13816 Comm: syz-executor.2 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1588.746109] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.746150] Call Trace: [ 1588.746170] [ 1588.746213] dump_stack_lvl+0xfa/0x120 [ 1588.746308] should_fail_ex+0x4d7/0x5e0 [ 1588.746424] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1588.746564] should_failslab+0xc2/0x120 [ 1588.746696] __kmalloc_noprof+0xb5/0x4b0 [ 1588.746810] ? srso_return_thunk+0x5/0x5f [ 1588.746890] ? avc_has_perm_noaudit+0x150/0x3c0 [ 1588.747032] genl_family_rcv_msg_attrs_parse.constprop.0+0xdb/0x290 [ 1588.747192] genl_family_rcv_msg_doit+0xac/0x2f0 [ 1588.747327] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1588.747457] ? trace_cap_capable+0x172/0x1e0 [ 1588.747571] ? srso_return_thunk+0x5/0x5f [ 1588.747650] ? cap_capable+0x9c/0x240 [ 1588.747759] ? srso_return_thunk+0x5/0x5f [ 1588.747838] ? security_capable+0x2f/0x90 [ 1588.747934] ? srso_return_thunk+0x5/0x5f [ 1588.748013] ? ns_capable+0xe2/0x120 [ 1588.748122] genl_rcv_msg+0x534/0x7e0 [ 1588.748262] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1588.748392] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 1588.748501] ? __pfx_nl80211_tx_mgmt+0x10/0x10 [ 1588.748602] ? __pfx_nl80211_post_doit+0x10/0x10 [ 1588.748740] ? __pfx___lock_acquire+0x10/0x10 [ 1588.748851] ? __pfx___lock_acquire+0x10/0x10 [ 1588.748975] netlink_rcv_skb+0x15d/0x450 [ 1588.749091] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1588.749226] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1588.749337] ? srso_return_thunk+0x5/0x5f [ 1588.749464] ? genl_rcv+0x19/0x40 [ 1588.749580] ? __pfx_down_read+0x10/0x10 [ 1588.749677] ? srso_return_thunk+0x5/0x5f [ 1588.749756] ? netlink_deliver_tap+0x1ae/0xce0 [ 1588.749857] ? srso_return_thunk+0x5/0x5f [ 1588.749947] ? is_vmalloc_addr+0x86/0xa0 [ 1588.750082] genl_rcv+0x28/0x40 [ 1588.750194] netlink_unicast+0x547/0x800 [ 1588.750322] ? __pfx_netlink_unicast+0x10/0x10 [ 1588.750431] ? srso_return_thunk+0x5/0x5f [ 1588.750546] netlink_sendmsg+0x8a2/0xd80 [ 1588.750679] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1588.750789] ? __import_iovec+0x1c7/0x4f0 [ 1588.750921] ____sys_sendmsg+0xac5/0xc80 [ 1588.751024] ? copy_msghdr_from_user+0xfc/0x150 [ 1588.751159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1588.751295] ? __pfx_lock_release+0x10/0x10 [ 1588.751413] ___sys_sendmsg+0x110/0x1b0 [ 1588.751550] ? __pfx____sys_sendmsg+0x10/0x10 [ 1588.751705] ? __fget_files+0x1fc/0x3b0 [ 1588.751816] ? srso_return_thunk+0x5/0x5f [ 1588.751895] ? lock_release+0x20f/0x6f0 [ 1588.752004] ? __pfx_lock_release+0x10/0x10 [ 1588.752104] ? trace_lock_acquire+0x13b/0x1b0 [ 1588.752200] ? srso_return_thunk+0x5/0x5f [ 1588.752280] ? lock_acquire+0x32/0xc0 [ 1588.752378] ? __fget_files+0x34/0x3b0 [ 1588.752504] ? srso_return_thunk+0x5/0x5f [ 1588.752583] ? __fget_files+0x206/0x3b0 [ 1588.752731] __sys_sendmsg+0x151/0x200 [ 1588.752805] ? __pfx___sys_sendmsg+0x10/0x10 [ 1588.752913] ? __pfx_ksys_write+0x10/0x10 [ 1588.753036] ? trace_x86_fpu_regs_activated+0x130/0x190 [ 1588.753173] do_syscall_64+0xbf/0x1d0 [ 1588.753269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.753367] RIP: 0033:0x7f41b1fbcb19 [ 1588.753418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.753494] RSP: 002b:00007f41af532188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1588.753565] RAX: ffffffffffffffda RBX: 00007f41b20cff60 RCX: 00007f41b1fbcb19 [ 1588.753619] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 1588.753668] RBP: 00007f41af5321d0 R08: 0000000000000000 R09: 0000000000000000 [ 1588.753718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1588.753767] R13: 00007ffefec949af R14: 00007f41af532300 R15: 0000000000022000 [ 1588.753873] [ 1588.870693] ------------[ cut here ]------------ [ 1588.871288] WARNING: CPU: 0 PID: 13805 at net/ipv4/ipmr.c:440 ipmr_rules_exit+0x13a/0x1c0 [ 1588.872015] Modules linked in: [ 1588.872368] CPU: 0 UID: 0 PID: 13805 Comm: syz-executor.1 Not tainted 6.13.0-rc3-next-20241220 #1 [ 1588.873135] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 1588.873869] RIP: 0010:ipmr_rules_exit+0x13a/0x1c0 [ 1588.874355] Code: ff df 48 c1 ea 03 80 3c 02 00 75 7d 48 c7 83 00 08 00 00 00 00 00 00 5b 5d 41 5c 41 5d 41 5e e9 5c 80 a3 00 e8 47 df 6a fd 90 <0f> 0b 90 eb 93 e8 3c df 6a fd 0f b6 2d 1d 26 36 02 31 ff 89 ee e8 [ 1588.875900] RSP: 0018:ffff88804245f8b8 EFLAGS: 00010216 [ 1588.876410] RAX: 000000000001bc49 RBX: ffff8880455f0000 RCX: ffffc9000d258000 [ 1588.877025] RDX: 0000000000040000 RSI: ffffffff8406ea09 RDI: 0000000000000005 [ 1588.878470] RBP: ffff88800ea36000 R08: 0000000000000000 R09: ffffed1008abe029 [ 1588.879991] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 1588.881437] R13: ffff8880455f0800 R14: ffff8880455f0000 R15: fffffbfff0c51178 [ 1588.883393] FS: 00007f754ed28700(0000) GS:ffff88806ce00000(0000) knlGS:0000000000000000 [ 1588.884988] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1588.886298] CR2: 00007ff46bf00000 CR3: 00000000424b6000 CR4: 0000000000350ef0 [ 1588.887480] Call Trace: [ 1588.887725] [ 1588.887949] ? __warn+0xea/0x380 [ 1588.888315] ? ipmr_rules_exit+0x13a/0x1c0 [ 1588.888717] ? report_bug+0x2f5/0x3f0 [ 1588.889114] ? ipmr_rules_exit+0x13a/0x1c0 [ 1588.889545] ? ipmr_rules_exit+0x13b/0x1c0 [ 1588.889950] ? handle_bug+0xe5/0x180 [ 1588.890352] ? exc_invalid_op+0x35/0x80 [ 1588.890741] ? asm_exc_invalid_op+0x1a/0x20 [ 1588.891169] ? ipmr_rules_exit+0x139/0x1c0 [ 1588.891604] ? ipmr_rules_exit+0x13a/0x1c0 [ 1588.892838] ? ipmr_rules_exit+0x139/0x1c0 [ 1588.893893] ipmr_net_exit_batch+0x53/0xa0 [ 1588.894338] ? __pfx_ipmr_net_exit_batch+0x10/0x10 [ 1588.894795] ? __pfx_ipmr_net_exit+0x10/0x10 [ 1588.895266] ops_exit_list+0x12b/0x180 [ 1588.895676] setup_net+0x492/0x7a0 [ 1588.896033] ? __pfx_setup_net+0x10/0x10 [ 1588.896453] ? __pfx_down_read_killable+0x10/0x10 [ 1588.896907] ? __raw_spin_lock_init+0x3a/0x110 [ 1588.897404] ? srso_return_thunk+0x5/0x5f [ 1588.897799] ? debug_mutex_init+0x37/0x70 [ 1588.898234] copy_net_ns+0x2e3/0x700 [ 1588.898639] create_new_namespaces+0x3f6/0xaf0 [ 1588.899097] copy_namespaces+0x45c/0x580 [ 1588.899530] copy_process+0x26c0/0x70e0 [ 1588.899929] ? srso_return_thunk+0x5/0x5f [ 1588.900352] ? lock_release+0x20f/0x6f0 [ 1588.900762] ? __pfx_copy_process+0x10/0x10 [ 1588.901190] ? srso_return_thunk+0x5/0x5f [ 1588.901607] ? _copy_from_user+0x5b/0xd0 [ 1588.902009] kernel_clone+0xeb/0x850 [ 1588.902411] ? find_held_lock+0x2c/0x110 [ 1588.902792] ? __pfx_kernel_clone+0x10/0x10 [ 1588.903207] ? srso_return_thunk+0x5/0x5f [ 1588.903648] ? srso_return_thunk+0x5/0x5f [ 1588.904045] __do_sys_clone3+0x1d9/0x260 [ 1588.904477] ? __pfx___do_sys_clone3+0x10/0x10 [ 1588.904946] ? __pfx___schedule+0x10/0x10 [ 1588.905396] ? srso_return_thunk+0x5/0x5f [ 1588.905782] ? trace_csd_function_exit+0x13a/0x1a0 [ 1588.906299] ? srso_return_thunk+0x5/0x5f [ 1588.906685] ? __flush_smp_call_function_queue+0x443/0x740 [ 1588.907216] do_syscall_64+0xbf/0x1d0 [ 1588.907622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1588.908094] RIP: 0033:0x7f75517b2b19 [ 1588.908471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 1588.909987] RSP: 002b:00007f754ed28188 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 1588.910680] RAX: ffffffffffffffda RBX: 00007f75518c5f60 RCX: 00007f75517b2b19 [ 1588.911313] RDX: 0000000000000000 RSI: 0000000000000058 RDI: 0000000020001540 [ 1588.911920] RBP: 00007f755180cf6d R08: 0000000000000000 R09: 0000000000000000 [ 1588.912553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1588.913155] R13: 00007fffa2af410f R14: 00007f754ed28300 R15: 0000000000022000 [ 1588.913818] [ 1588.914047] irq event stamp: 14337 [ 1588.914397] hardirqs last enabled at (14363): [] __up_console_sem+0x78/0x80 [ 1588.915150] hardirqs last disabled at (14372): [] __up_console_sem+0x5d/0x80 [ 1588.915929] softirqs last enabled at (14358): [] handle_softirqs+0x50c/0x770 [ 1588.916711] softirqs last disabled at (14345): [] __irq_exit_rcu+0xc4/0x100 [ 1588.917485] ---[ end trace 0000000000000000 ]--- 18:29:35 executing program 3: clone3(&(0x7f0000001540)={0x177323511, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:35 executing program 0: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:35 executing program 7: clone3(&(0x7f0000001540)={0x177323504, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:35 executing program 0: clone3(&(0x7f0000001540)={0x177323500, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) syz_open_procfs(0x0, 0x0) 18:29:35 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @deauth={@with_ht={{{}, {}, @device_a, @broadcast, @from_mac=@device_b}}, 0x0, @void}}]}, 0x40}}, 0x0) (fail_nth: 8) 18:29:35 executing program 6: clone3(&(0x7f0000001540)={0x17732350b, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) r1 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r1, &(0x7f0000000040)=""/169, 0x200000e9) 18:29:35 executing program 3: clone3(&(0x7f0000001540)={0x177323512, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) close(0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r0, &(0x7f0000000040)=""/169, 0x200000e9) syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') 18:29:35 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000007ec0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)={0x18, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x7, 0x0, 0x0, 0x0, @binary="d8c931"}]}, 0x18}], 0x1}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, 0x0, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x3c}}, 0x4) clone3(&(0x7f0000001540)={0x177323500, &(0x7f00000000c0), 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r2, &(0x7f0000000040)=""/169, 0x200000e9) r3 = signalfd(r2, &(0x7f0000000200)={[0x6]}, 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), r0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r3, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r4, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200080d0}, 0x20008805) r5 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r5, &(0x7f0000000040)=""/169, 0x200000e9) ioctl$HIDIOCGCOLLECTIONINFO(r5, 0xc0104811, &(0x7f0000000380)={0x1, 0x5, 0x7fffffff, 0x7}) r6 = syz_open_procfs(0x0, &(0x7f0000000f00)='mountinfo\x00') read$hiddev(r6, &(0x7f0000000040)=""/169, 0x200000e9) [ 1589.285606] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13844 comm=syz-executor.1 [ 1589.439796] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13844 comm=syz-executor.1 VM DIAGNOSIS: 18:29:35 Registers: info registers vcpu 0 RAX=dffffc0000000060 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=ffffffff82842a80 RDI=ffffffff8868a060 RBP=ffffffff8868a020 RSP=ffff88804245f198 R8 =0000000000000000 R9 =ffffed1001654046 R10=0000000000000010 R11=0000000000000000 R12=0000000000002710 R13=0000000000000020 R14=fffffbfff10d145e R15=dffffc0000000000 RIP=ffffffff82842ad5 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007f754ed28700 00000000 00000000 GS =0000 ffff88806ce00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff46bf00000 CR3=00000000424b6000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000000000000000000000000000 XMM01=ffffffffffffffffffffffffffffffff XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=dffffc0000000000 RBX=ffff8880474a78a8 RCX=0000000000000001 RDX=1ffff11008e94f17 RSI=ffff8880474a7c28 RDI=ffff8880474a78b8 RBP=ffff8880474a7c28 RSP=ffff8880474a7800 R8 =ffffffff86842a06 R9 =ffff8880474a78e8 R10=000000000003aab6 R11=00000000000241e6 R12=0000000000000008 R13=ffff8880474a0000 R14=ffff8880474a7c30 R15=ffff8880474a78a8 RIP=ffffffff81349a38 RFL=00000246 [---Z-P-] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 00007ff8ce0d3700 00000000 00000000 GS =0000 ffff88806cf00000 00000000 00000000 LDT=0000 fffffe0000000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ff8ce0d2ff8 CR3=0000000044e10000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=000000000000000000000000000000ff XMM01=25252525252525252525252525252525 XMM02=00000000000000000000000000000000 XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=0000000000000000000000524f525245 XMM07=00000000000000000000000000000000 XMM08=000000000000000000524f5252450040 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000